CVE-2024-39743

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 297172...

CVE-2021-41254

kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, Service Accounts and Flux Kustomization objects, could...

CVE-2025-23680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Operator narnoo-shortcodes allows Reflected XSS.This issue affects Narnoo Operator: from n/a through = 2.0.0...

CVE-2024-39742

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169...

Bare Metal Operator Spatial Partitioning Disclosure

The vulnerability of the Bare Metal Operator BMO software is related to insufficient spatial partitioning. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2025-59469

This vulnerability allows a Backup or Tape Operator to write files as root...

CVE-2025-59470

This vulnerability allows a Backup Operator to perform remote code execution RCE as the postgres user by sending a malicious interval or order parameter...

CVE-2025-59469

This vulnerability allows a Backup or Tape Operator to write files as root...

CVE-2025-59470

This vulnerability allows a Backup Operator to perform remote code execution RCE as the postgres user by sending a malicious interval or order parameter...

CVE-2025-55125

This vulnerability allows a Backup or Tape Operator to perform remote code execution RCE as root by creating a malicious backup configuration file...

CVE-2025-59470

This vulnerability allows a Backup Operator to perform remote code execution RCE as the postgres user by sending a malicious interval or order parameter...

CVE-2025-59469

This vulnerability allows a Backup or Tape Operator to write files as root...

CVE-2025-55125

This vulnerability allows a Backup or Tape Operator to perform remote code execution RCE as root by creating a malicious backup configuration file...

CVE-2025-55125

This vulnerability allows a Backup or Tape Operator to perform remote code execution RCE as root by creating a malicious backup configuration file...

CVE-2025-59470

This vulnerability allows a Backup Operator to perform remote code execution RCE as the postgres user by sending a malicious interval or order parameter...

CVE-2025-59469

This vulnerability allows a Backup or Tape Operator to write files as root...

CVE-2025-59470

The CVE-2025-59470 issue affects Veeam Backup & Replication (versions 13.0.1.180 and earlier). The vulnerability allows a user with Backup or Tape Operator privileges to trigger remote code execution as the postgres user by sending crafted interval or order parameters in backup configurations. Pu...

CVE-2025-55125

Vulnerable software: Veeam Backup & Replication (versions prior to 13.0.1.1071). Hi-level description: CVE-2025-55125 enables a Backup or Tape Operator to achieve remote code execution as root by crafting a malicious backup configuration file. Root cause stated: manipulation of backup configurati...

CVE-2025-59469

The CVE-2025-59469 issue affects Veeam Backup & Replication (13.x), where a Backup or Tape Operator could write files as root due to privilege handling. Affected versions include 13.0.1.180 and earlier 13 builds; remediation is to upgrade to 13.0.1.1071 or later, as documented in Veeam KB4792. Th...

CVE-2025-55125: Improper Neutralization of Special Elements used in a Command

This vulnerability allows a Backup or Tape Operator to perform remote code execution RCE as root by creating a malicious backup configuration file...