Lucene search
+L

61840 matches found

NVD
NVD
•added 2025/10/10 11:15 p.m.•27 views

CVE-2025-62159

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/10 10:23 p.m.•6 views

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS5.7AI score0.00305EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/10/10 10:23 p.m.•24 views

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS6.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/10 10:23 p.m.•31 views

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS0.00305EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/10 10:23 p.m.•32 views

EUVD-2025-33793

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS5.7AI score0.00305EPSS
SaveExploits0References1
Mend
Mend
•added 2025/10/10 10:23 p.m.•8 views

CVE-2025-62159

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS5.7AI score0.00305EPSS
SaveExploits0References3
CVE
CVE
•added 2025/10/10 10:23 p.m.•47 views

CVE-2025-62159

CVE-2025-62159 affects External Secrets Operator’s BeyondTrust provider (versions 0.10.1–0.19.2). The legacy code retrieved Kubernetes secrets directly without validating namespace context or secret store type, enabling cross‑namespace secret access and security boundary violations. In version 0....

8.7CVSS5.7AI score0.00305EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•23 views

PT-2025-41614

Name of the Vulnerable Software and Affected Versions External Secrets Operator versions 0.10.1 through 0.19.2 Description The External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A flaw exists in the BeyondTrust provid...

8.7CVSS5.7AI score0.00305EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•8 views

CVE-2025-62159: Improper Access Control

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

8.7CVSS5.7AI score0.00305EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•6 views

CVE-2025-7526: Improper Limitation of a Pathname to a Restricted Directory

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file deletion via renaming due to insufficient file path validation in the setuserprofileimage function in all versions up to, and including, 6.6.7. This makes it possible for...

9.8CVSS6.3AI score0.00915EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•7 views

CVE-2025-7634: Improper Control of Filename for Include/Require Statement in PHP Program

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.6.7 via the mode parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on th...

9.8CVSS6.4AI score0.00799EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/08 8:19 p.m.•33 views

CVE-2025-61766

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

6.5CVSS5.8AI score0.00376EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/10/07 9:40 a.m.•228 views

vmalert-operator

VMAlert Operator ⚠️ Proof of Concept Bridge Grafana Aler...

7.1AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-0369

Malware in sbrugna...

9.8CVSS8.1AI score0.01281EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2013-6833

Malware in sbrugna...

4.3CVSS5.8AI score0.01792EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2014-4788

Malware in sbrugna...

5CVSS5.8AI score0.01116EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2013-7151

Malware in sbrugna...

6.8CVSS5.8AI score0.01268EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•30 views

EUVD-2021-0338

Malware in sbrugna...

7.8CVSS7.3AI score0.00201EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2001-0081

Malware in sbrugna...

5CVSS6.4AI score0.01386EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-2283

Malware in sbrugna...

9CVSS7.7AI score0.01824EPSS
SaveExploits1References4
Rows per page
Query Builder