SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

OsTicket < 1.14.3 - Server Side Request Forgery

SSRF vulnerability exists in osTicket before 1.14.3, allowing an attacker to add malicious files to the server or perform port scanning. id: CVE-2020-24881 info: name: OsTicket 1.14.3 - Server Side Request Forgery author: hnd3884 severity: critical description: | SSRF vulnerability exists in...

CVE-2026-74411

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during Wi-Fi scanning on the 6GHz band. The CPU becomes stuck in rtw89hwscanaddchanax for over 20 seconds, leading to a system...

CVE-2026-68469

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, the driver has to confirm a previously received sleep request. The normal sequence of evets goes like this: EVENTSLEEP -...

CVE-2026-74411

Summary: CVE-2026-74411 affects the Linux kernel Wi‑Fi driver rtw89 on 6 GHz, where a data type issue in the scan index can cause a soft lockup during scanning. The root cause is in rtw89_hw_scan_add_chan_ax within the 6 GHz scan path; the loop uses i as the counter and reads %bl into %eax, with ...

EUVD-2026-59558

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during Wi-Fi scanning on the 6GHz band. The CPU becomes stuck in rtw89hwscanaddchanax for over 20 seconds, leading to a system...

CVE-2026-68469

The CVE describes a Linux kernel wifi mwifiex driver issue where a sleep confirmation could be skipped due to ps_state being set to AWAKE during the association response, causing a forced wake and preventing a deferred sleep-confirm from being sent. This led to a permanently busy scans condition:...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-evidently, crossplane-provider-aws-bedrock, vendir, aws-nuke-fips, opentelemetry-collector-k8s-fips, gatus-fips, image-factory, aws-eks-pod-identity-agent, prometheus-alertmanager, kyverno-policy-reporter-plugins-kyverno, policy-controller,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: nfpm, aws-nuke, addon-resizer, cluster-autoscaler, gobuster, crossplane-provider-aws-cloudformation, kind, rancher-agent, metrics-server, tigera-operator, external-secrets-operator, newrelic-fluent-bit-output, crossplane-provider-aws-rds, kubescape, k8sgateway,...

GO-2025-3917 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: grype, wolfictl, zarf, kubescape, k9s, syft...

GO-2024-2912 vulnerabilities

Vulnerabilities for packages: dive...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator, datadog-agent...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: nuclei, dataplaneapi, gptscript, timoni, dataplaneapi-fips...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: tfsec, policy-controller, cosign, policy-controller-fips, kyverno-notation-aws, trivy, dapr-fips, dapr, spire-server-fips, spire-server, kyverno-notation-aws-fips, kots, kyverno, cosign-fips, conftest, conftest-fips, witness, trivy-fips, kyverno-fips...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: k9s-fips, helm-push, helm-docs, k8ssandra-client, k8ssandra-client-fips, nova, envoy-gateway-fips, linkerd2, pluto, harbor, istio, cluster-api-helm-controller-fips, k8sgpt, helm-mapkubeapis, chartmuseum, pluto-fips, kuma, trivy-operator, headlamp, trivy, eksctl,...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, k8s-device-plugin, cadvisor-fips, k8s-device-plugin-fips, gpu-operator-fips, prometheus-podman-exporter, sriov-network-device-plugin-fips, nvidia-container-toolkit, cadvisor, buildah, podman, rancher-agent, sriov-network-device-plugin,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: deno, sccache, xh, oranda, kdash, rye, rustls-ffi, cargo-audit, uv, qdrant, wasmtime, lychee, pixi, tealdeer, rustup, buck2, samply, ztunnel-fips, ztunnel, zed, wasmcloud, ntpd-rs, zola, linkerd-extension-init, sqlx, nushell, shadowsocks-rust, wasm-pack, zizmor, atui...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, syft-fips, argo-cd, nemo, syft, telegraf, chainloop-cli, gitaly, scorecard, chainloop-cli-fips, external-secrets-operator, terragrunt, upwind-agent, cerbos-fips, grafana-fips, seaweedfs-rocksdb-fips, amazon-ssm-agent, cerbos, rancher-fleet-fips,...