13514 matches found
GO-2026-4681 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines...
GO-2023-1986 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2022-0209 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2023-1702 vulnerabilities
Vulnerabilities for packages: go, kubeflow-katib...
GO-2025-4110 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GO-2025-3940 vulnerabilities
Vulnerabilities for packages: atlantis...
GO-2024-2824 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit, ctop, thanos, ksops, pulumi-language-yaml, osv-scanner, flux-kustomize-controller, caddy, scorecard, gke-gcloud-auth-plugin, regclient, kustomize, zot, metacontroller, mkcert, src, tfsec, flux-source-controller, vertical-pod-autoscaler, gops...
GHSA-699F-92F5-M297 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GHSA-JGRX-MGXX-JF9V vulnerabilities
Vulnerabilities for packages: arangodb...
SUSE CVE-2026-14662
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These...
PT-2026-72088
Name of the Vulnerable Software and Affected Versions MindsDB Minds Platform versions prior to 26.1.1 Description An unauthenticated remote code execution flaw allows attackers to execute arbitrary OS commands. The issue occurs when crafted prompts are submitted to the unprotected 'POST...
CVE-2026-72841
The CVE-2026-72841 entry affects the OpenWrt luci-app-openvpn component. An insecure validation of the instance_name2 parameter during file upload lets authenticated users perform path traversal and write arbitrary files outside the intended directory. Attackers could place SSH keys in system dir...
CVE-2026-72840 OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...
CVE-2026-73665
FreePBX UCP vulnerability affecting versions prior to 17.0.9. The UCP Node server (ports 8001/8003) uses io.use(checkAuth) but Socket.IO v4 applies that middleware only to the default namespace, allowing an unauthenticated client to reach custom namespaces. This can lead to crafted AMI actions th...
CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
CVE-2026-72776
CVE-2026-72776 affects AgenticSeek and describes an unauthenticated remote code execution via the unprotected POST /query API endpoint (bound to 0.0.0.0:7777 with wildcard CORS). An attacker can send crafted queries to trigger the agent to generate and execute shell commands through BashInterpret...
MGASA-2026-0333 Updated roundcubemail packages fix security vulnerabilities
Add basic validation for content proxied by the css proxy Fix SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets, Fix SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading islocalurl check Fix remote content blocking bypass via unclosed url in a...
Updated roundcubemail packages fix security vulnerabilities
Add basic validation for content proxied by the css proxy Fix SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets, Fix SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading islocalurl check Fix remote content blocking bypass via unclosed url in a...
