esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, rancher-agent, prometheus-podman-exporter-fips, podman, gpu-operator-fips, buildah-fips, node-feature-discovery, k8s-device-plugin-fips, sriov-network-device-plugin, sriov-network-device-plugin-fips, node-feature-discovery-fips, cadvisor,...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-securityhub, azurefile-csi, vitess, crossplane-provider-aws-mediastore, flux-image-automation-controller-fips, continuity, dockerize-fips, crossplane-function-patch-and-transform-fips, bank-vaults-vault-operator, cert-manager-google-cas-issuer...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: vitess, grafana, gitlab-rails-ce, keda-fips, argo-workflows-fips, opentelemetry-collector, argo-cd-fips, tekton-pipelines-fips, gitlab-rails-ce-fips, podman-fips, gitlab-workhorse-ce-fips, tigera-operator, teleport-operator-fips, mattermost-fips, kubernetes, helm,...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: cilium-cli, chartmuseum, helm-push, flux-helm-controller, kargo, kubescape, chart-testing, cluster-api-helm-controller, headlamp, istio, zot, flux-source-controller, linkerd2, trivy, k9s, trivy-operator, tw, helm-set-status, nova, k8ssandra-client, kots, helm-docs,...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: task, kubescape, boring-registry, crossplane-provider-aws-cloudfront, crossplane-provider-aws-sqs, xeol, ksops, percona-server-mongodb-operator, flux-kustomize-controller, zot, buildkitd, tfsec, crossplane-provider-aws-cloudwatchlogs, velero-plugin-for-aws, bento,...

GO-2024-2600 vulnerabilities

Vulnerabilities for packages: ferretdb, task, terraform-docs, q, wireguard-go, memcached-exporter, prometheus-pushgateway, nri-prometheus, temporal-ui-server, nri-elasticsearch, argo-workflows, terraform, kubernetes-csi-external-provisioner, influx, kubeflow-katib, controller-gen, kubevela, kpt,...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, grafana-rollout-operator, kubescape, boring-registry, xeol, timescaledb-parallel-copy, tetragon, pvc-autoresizer, kube-vip, zot, argo-cd, sbomqs, thanos-operator, kserve-rest-proxy, nginx-prometheus-exporter, ip-masq-agent, git-lfs, wuzz,...

CVE-2026-64401

creationtimestamp| type| source ---|---|--- 2026-08-06 04:51:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

GHSA-67C8-VPRW-8M9V vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17662 vulnerabilities

Vulnerabilities for packages: chromium...

Photon OS 5.0: Docker PHSA-2023-5.0-91-0038

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-BC02149 Security fixes in airflow-3 3.1.8-r6

Package airflow-3 version 3.1.8-r6 fixes 13 vulnerabilities: CVE-2026-53533, CVE-2026-59885, CVE-2026-59886, CVE-2026-59890, CVE-2026-49476...

CLEANSTART-2026-JY49884 Security fixes in kibana 9.3.2-r3

Package kibana version 9.3.2-r3 fixes 45 vulnerabilities: ghsa-2w6w-674q-4c4q, ghsa-xq3m-2v4x-88gg, ghsa-pf86-5x62-jrwf, ghsa-6chq-wfr3-2hj9, ghsa-v9p9-hfj2-hcw8...

Linux Distros Unpatched Vulnerability : CVE-2026-53584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security issues,...

CVE-2026-59688

creationtimestamp| type| source ---|---|--- 2026-07-28 20:15:07+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-755 2026-07-28 20:45:10+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-7 2026-08-13...

CVE-2026-61609

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:05+00:00| published-proof-of-concept| https://github.com/pterodactyl/panel/security/advisories/GHSA-xvc3-826v-xf47 2026-07-28 17:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6ijm6f2o...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3156-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3156-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: -...