59858 matches found
EUVD-2026-60265
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, sanitizemustachedict in glances/actions.py sanitizes individual Mustache values before chevron.render, allowing adjacent unescaped Mustache variables to reconstruct shell operators that securepopen executes when...
PT-2026-76762
Name of the Vulnerable Software and Affected Versions search-v2-operator affected versions not specified Description A flaw exists in the search-v2-operator where the search-serviceaccount is assigned overly broad permissions. This allows for the impersonation of users and groups across the entir...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter, buildkitd, splunk-otel-collector, terraform-provider-sendgrid, dapr, net-kourier, cilium, grpcurl, certificate-transparency, crossplane-provider-aws-eks, helm, grafana-mimir, lvm-driver, src, nuclei, crossplane, zarf, kyverno-policy-reporter,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: nats-top, certificate-transparency, crossplane-provider-aws-eks, lvm-driver, grafana-mimir, src, terraform-provider-kubernetes, crossplane-provider-sql, nova, kube-rbac-proxy, flux-image-reflector-controller, gostatsd, newrelic-nri-statsd, cortex, ratify,...
CVE-2026-56862 vulnerabilities
Vulnerabilities for packages: nats-top, certificate-transparency, crossplane-provider-aws-eks, lvm-driver, grafana-mimir, src, terraform-provider-kubernetes, crossplane-provider-sql, nova, kube-rbac-proxy, flux-image-reflector-controller, gostatsd, newrelic-nri-statsd, cortex, ratify,...
CVE-2026-71571
Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL...
CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...
CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...
EUVD-2026-58805
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...
CVE-2026-71571
Technical details are not publicly available in the provided documents. Monitor for updates from official sources.
EUVD-2026-58804
Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL...
CVE-2025-7639
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps"...
CVE-2025-7639
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps"...
CVE-2026-57469
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...
CVE-2026-57469 Cross-Site Request Forgery (CSRF) in KUNBUS PiCtory
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...
GO-2025-4161 vulnerabilities
Vulnerabilities for packages: victorialogs, victoriametrics-operator-fips, victorialogs-fips...
GO-2026-5298 vulnerabilities
Vulnerabilities for packages: tbot, teleport, teleport-operator-fips...
GO-2025-3690 vulnerabilities
Vulnerabilities for packages: seaweedfs-operator-fips, seaweedfs-operator...