CLEANSTART-2026-FW89965 Security fixes in kubernetes-csi-external-resizer 2.0.0-r0

Package kubernetes-csi-external-resizer version 2.0.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

CLEANSTART-2026-TB71092 Security fixes in kubernetes-csi-external-resizer-fips 2.1.0-r1

Package kubernetes-csi-external-resizer-fips version 2.1.0-r1 fixes 48 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: timestamp-authority, mongodb-kubernetes-operator, cloud-sql-proxy, cosign, knative-client, nri-consul, kube-bench, helm, newrelic-nri-statsd, apko, temporal-ui-server, fluxcd-kustomize-mutating-webhook, aws-application-networking-k8s, promxy, step-kms-plugin, cadviso...

CVE-2026-12784

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDANTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires local access. The exploit has been made available to the...

CVE-2026-12784 IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDANTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires local access. The exploit has been made available to the...

CVE-2026-12784

CVE-2026-12784 affects IM-Magic Partition Resizer (kernel driver) up to version 7.9.0. A weakness in the MDA_NTDRV.sys library function leads to improper access controls. The vulnerability requires local access and has a publicly available exploit. The vendor was contacted but did not respond. No...

CVE-2026-12784

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDANTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires local access. The exploit has been made available to the...

EUVD-2026-38149

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDANTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires local access. The exploit has been made available to the...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kustomize-fips, kubernetes, helm-fips, cert-manager-google-cas-issuer, neuvector-scanner-fips, rancher-fleet, crossplane-function-go-templating-fips, metrics-agent-fips, minio-fips, crossplane-provider-aws-lambda-fips, rancher-system-upgrade-controller,...

EUVD-2022-2658

Malicious code in bioql PyPI...

EUVD-2023-29397

Malicious code in bioql PyPI...

EUVD-2024-25124

Malicious code in bioql PyPI...

EUVD-2022-4708

Malicious code in bioql PyPI...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gitsign, linkerd2-proxy-init, mongodb-kubernetes-operator, container-object-storage-interface, kube-vip-cloud-provider, local-path-provisioner, grafana-operator, custom-pod-autoscaler-operator, confluent-common-docker, newrelic-nri-statsd, octo-sts, rancher-machine,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: gitsign, linkerd2-proxy-init, mongodb-kubernetes-operator, container-object-storage-interface, kube-vip-cloud-provider, local-path-provisioner, grafana-operator, custom-pod-autoscaler-operator, confluent-common-docker, newrelic-nri-statsd, octo-sts, rancher-machine,...

CVE-2025-6065

The Image Resizer On The Fly plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' task in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which c...

CVE-2025-6065

The Image Resizer On The Fly plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' task in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which c...

CVE-2025-6065 Image Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File Deletion

The Image Resizer On The Fly plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' task in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which c...

WordPress Image Resizer On The Fly plugin <= 1.1 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by theviper17y in WordPress Plugin Image Resizer On The Fly versions = 1.1...

WordPress plugin Image Resizer On The Fly 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exists ...