20703 matches found
PT-2026-73035
Name of the Vulnerable Software and Affected Versions opensourcepos Open Source Point of Sale versions prior to 3.4.3 Description An issue exists in the Login Endpoint component within the Login::index function of the app/Config/Filters.php file. This flaw allows for the improper restriction of...
CVE-2026-19895: Improper Restriction of Excessive Authentication Attempts
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...
GO-2024-2907 vulnerabilities
Vulnerabilities for packages: nuclei...
GO-2025-3604 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, bom, crossplane, pulumi-kubernetes-operator, task, kubescape, pulumi-language-yaml, nuclei, flux, argocd-image-updater, nemo, pulumi-language-java, chezmoi, go-licenses, grype, trivy, argo-events, kubevela, gptscript, packer-fips,...
GO-2026-5005 vulnerabilities
Vulnerabilities for packages: kubernetes, rancher, istio, flux, gatekeeper, opentelemetry-collector, telegraf, kaf, omnictl-multiarch, gatekeeper-fips, tekton-pipelines, gitlab-workhorse-ce-fips, kine, podman-fips, teleport-operator-fips, docker-cli-buildx, kubernetes-fips, mattermost,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: trivy-operator-fips, crossplane, zarf-fips, buildkitd, kubescape, crossplane-fips, cloudbeat, ko-fips, kyverno-policy-reporter-plugins-kyverno-fips, tkn, kubescape-server-fips, policy-controller, image-factory, tekton-chains, tkn-fips, trivy, sigstore-scaffolding-fip...
GO-2026-4962 vulnerabilities
Vulnerabilities for packages: mattermost...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2026-5029 vulnerabilities
Vulnerabilities for packages: minio, zot, helm, fq, grafana-pyroscope, crossplane-provider-azure-authorization, istio, prometheus, step-issuer, ingress-nginx-controller, hydra, kots, caddy, traefik, karpenter, nerdctl, terraform-provider-acme, k3s, external-secrets-operator, telegraf, gptscript,...
GO-2024-2456 vulnerabilities
Vulnerabilities for packages: goreleaser, src-fingerprint, gitsign, gitness, go-licenses, bom, nuclei, scorecard, pulumi-kubernetes-operator...
GO-2026-5668 vulnerabilities
Vulnerabilities for packages: zot, skopeo, nuclei, ko, amazon-cloudwatch-agent-operator, envoy-gateway, kots, portieris, opentelemetry-operator, grafana-alloy, nerdctl, trivy, amazon-cloudwatch-agent, docker-credential-gcr, aws-otel-collector, grafana, rancher-machine, kpt, trivy-operator,...
GO-2026-5336 vulnerabilities
Vulnerabilities for packages: zot, teleport, pulumi-language-java, k9s, xeol, kargo, kaniko, nuclei, guac, cerbos, trufflehog, witness, gitlab-runner, kots, pulumi-language-dotnet, steampipe, argo-cd, grafana-alloy, dagger, flux-image-automation-controller, gitaly, rancher-fleet, terragrunt, triv...
CLEANSTART-2026-YY19713 Security fixes in keycloak 26.7.0-r1
Package keycloak version 26.7.0-r1 fixes 13 vulnerabilities: ghsa-rmj7-2vxq-3g9f, ghsa-j3rv-43j4-c7qm, ghsa-9fxm-vc8v-hj55, ghsa-5hh8-q8hv-fr38, ghsa-rcqc-6cw3-h962...
Linux Distros Unpatched Vulnerability : CVE-2026-19587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. CVE-2026-19587 Note that Nessus relies on the presen...
GHSA-WP74-JGXH-GV4Q vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-47228 Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords
Admidio is an open-source user management solution. modules/registration.php mode sendlogin regenerates a random password for useruuidassigned, stores its bcrypt hash in admusers.usrpassword, and emails the cleartext to that user. Every other state-changing mode in the same file assignmember,...