CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1742 matches found

OSV•added 2026/05/18 1:13 p.m.•22 views

CLEANSTART-2026-OS08278 Security fixes for CVE-2025-61727, CVE-2025-61729, ghsa-cgrx-mc8f-2prm, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-vvgc-356p-c3xw applied in versions: 1.10.2-r0, 1.10.2-r1, 1.5.0-r0, 1.9.1-r0

Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

7.5CVSS5.8AI score0.00464EPSS

SaveExploits2References9

Positive Technologies•added 2026/05/18 12:0 a.m.•28 views

PT-2026-41785

Name of the Vulnerable Software and Affected Versions OpenTelemetry eBPF Instrumentation versions prior to 0.9.0 Description OpenTelemetry eBPF Instrumentation OBI replays BPF probe hits into histogram observations by looping once per recorded run count. On busy systems, the run-count delta can...

7.5CVSS5.8AI score0.00319EPSS

SaveExploits1

Wolfi•added 2026/05/14 7:48 p.m.•28 views

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: node-problem-detector, minio, mc, telegraf, certificate-transparency, minio-operator, karma, opentelemetry-collector-contrib, jaeger, k8sgpt, opentelemetry-collector, opentelemetry-operator, fluent-bit-plugin-loki, prometheus-pushgateway, istio, mcp-grafana,...

6.1CVSS8.4AI score0.00182EPSS

SaveExploits0

OSV•added 2026/05/11 2:42 p.m.•13 views

GHSA-Q7RR-3CGH-J5R3 Prometheus exporter process crash via malformed HTTP request

Summary A single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics endpoint default 0.0.0.0:9464 has no error handling around URL parsing, so a request with an invalid URI causes an uncaught TypeError that terminates the process. You...

7.5CVSS5.9AI score0.00455EPSS

SaveExploits0References3

Github Security Blog•added 2026/05/11 2:42 p.m.•26 views

Prometheus exporter process crash via malformed HTTP request

7.5CVSS5.9AI score0.00455EPSS

SaveExploits0References3Affected Software3

Snyk•added 2026/05/11 2:42 p.m.•11 views

Improper Handling of Exceptional Conditions

Overview @opentelemetry/exporter-prometheus is an OpenTelemetry Exporter Prometheus provides a metrics endpoint for Prometheus Affected versions of this package are vulnerable to Improper Handling of Exceptional Conditions via the PrometheusExporter process. An attacker can cause the process to...

8.7CVSS5.8AI score0.00455EPSS

SaveExploits0References2

Positive Technologies•added 2026/05/11 12:0 a.m.•21 views

PT-2026-39676

Name of the Vulnerable Software and Affected Versions opentelemetry-js versions prior to 0.217.0 Description A single malformed HTTP request can crash any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics endpoint default '0.0.0.0:9464' lacks error handling during URL...

7.5CVSS5.9AI score0.00455EPSS

SaveExploits0References5

Chainguard•added 2026/05/09 1:18 a.m.•15 views

GHSA-3V2C-X6Q9-F697 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, gitlab-runner-fips, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-iam-fips, headlamp-fips, upwind-agent, ginkgo, peerdb-flow, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, omni-fips,...

5.3AI score

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•18 views

GHSA-2283-WF8C-RW8R vulnerabilities

5.3AI score

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•24 views

CVE-2026-39823 vulnerabilities

6.1CVSS6.9AI score0.00314EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:18 a.m.•27 views

CVE-2026-39826 vulnerabilities

6.1CVSS6.9AI score0.00371EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•24 views

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, gitlab-runner-fips, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-iam-fips, vgpu-util, headlamp-fips, upwind-agent, ldap2pg-fips, ocm-kubernetes-controller-fips, ginkgo, peerdb-flow, nvidia-container-toolkit-fips,...

7.5CVSS7.7AI score0.00231EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•28 views

CVE-2026-39819 vulnerabilities

5.3CVSS6.6AI score0.00179EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•27 views

CVE-2026-39817 vulnerabilities

5.9CVSS6.8AI score0.0017EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•22 views

GHSA-QF3Q-3H68-MMH2 vulnerabilities

5.3AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•27 views

GHSA-QC64-M6C2-V4X7 vulnerabilities

5.3AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•25 views

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, gitlab-runner-fips, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-iam-fips, headlamp-fips, upwind-agent, ldap2pg-fips, ocm-kubernetes-controller-fips, ginkgo, peerdb-flow, prometheus-redis-exporter, argo-rollouts-fips,...

5.3AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•26 views

GHSA-5M4P-2GJX-P2G8 vulnerabilities

5.3AI score

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•47 views

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, gitlab-runner-fips, crossplane-provider-aws-rolesanywhere, crossplane-provider-aws-iam-fips, headlamp-fips, upwind-agent, ldap2pg-fips, ocm-kubernetes-controller-fips, ginkgo, peerdb-flow, prometheus-redis-exporter, argo-rollouts-fips,...

7.5CVSS7.7AI score0.00588EPSS

SaveExploits0

Chainguard•added 2026/05/09 1:17 a.m.•38 views

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: kubernetes-replicator, k6, headlamp-fips, spire-controller-manager, argo-rollouts-fips, lvm-driver-fips, vault-fips, conftest, crossplane-provider-aws-sqs-fips, external-secrets-fips, kbld, argocd-image-updater-fips, k8s-driver-manager-fips, nodetaint-fips,...

7.5CVSS6.3AI score0.00781EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by