1408 matches found
CVE-2025-61728 vulnerabilities
Vulnerabilities for packages: cilium-envoy-fips, agentbeat, opensearch-k8s-operator-fips, aactl, contour-fips, runc, localstack, zitadel, etcd-fips, tigera-operator, gatekeeper-fips, reports-server, k9s-fips, mattermost-fips, prometheus-fips, syncthing, fuse-overlayfs-snapshotter,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: mongodb-kubernetes-operator-fips, kyverno-policy-reporter-fips, podinfo, tigera-operator, whereabouts, secretgen-controller, rabbitmq-default-user-credential-updater-fips, azcopy, flux-source-watcher, volcano, chart-testing-fips, nri-haproxy, x509-certificate-exporte...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: mongodb-kubernetes-operator-fips, kyverno-policy-reporter-fips, podinfo, tigera-operator, whereabouts, secretgen-controller, rabbitmq-default-user-credential-updater-fips, azcopy, flux-source-watcher, volcano, chart-testing-fips, nri-haproxy, x509-certificate-exporte...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: sbom-convert, helm-docs, mongodb-kubernetes-operator-fips, kyverno-policy-reporter-fips, podinfo, tigera-operator, whereabouts, secretgen-controller, rabbitmq-default-user-credential-updater-fips, azcopy, flux-source-watcher, volcano, chart-testing-fips, nri-haproxy,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: sbom-convert, helm-docs, mongodb-kubernetes-operator-fips, kyverno-policy-reporter-fips, podinfo, tigera-operator, whereabouts, secretgen-controller, rabbitmq-default-user-credential-updater-fips, azcopy, flux-source-watcher, volcano, chart-testing-fips, nri-haproxy,...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: jitsucom-bulker, bank-vaults...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: bank-vaults, rancher-security-scan, zitadel, tkn-fips, boring-registry-fips, k9s-fips, mattermost-fips, kyverno, beats, kyverno-fips, grafana, gitlab-cng, pluto-fips, jitsucom-bulker, istio-fips, beats-fips, neuvector-sigstore-interface-fips, kyverno-notation-aws-fip...
Unsafe Deserialization in PHPT Code Coverage Handling
Overview A vulnerability has been discovered involving unsafe deserialization of code coverage data in PHPT test execution. The vulnerability exists in the cleanupForCoverage method, which deserializes code coverage files without validation, potentially allowing remote code execution if malicious...
CVE-2026-0863 Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.
Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system. The vulnerability can be exploited via the Code block by an authenticated user with basic permissio...
CVE-2025-14235
Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06....
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the EnvoyExtensionPolicy resource. An attacker can execute arbitrary commands and access sensitive credentials by injecting malicious Lua scripts. This can lead to privilege escalation, theft of secrets, and...
CVE-2025-11246
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user with specific permissions to remove all project runners from unrelated projects by manipulating GraphQL runner...
CVE-2025-11246 Insufficient Granularity of Access Control in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user with specific permissions to remove all project runners from unrelated projects by manipulating GraphQL runner...
CVE-2024-2874
An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potential to disrupt the loading of targeted GitLab web resources...
CVE-2025-2937 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-QFPG-MW2P-44HG vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-H6QJ-3XRQ-VXH8 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-WXX2-2CV7-VHX6 vulnerabilities
Vulnerabilities for packages: gitlab-runner...