esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, podman, cadvisor-fips, node-feature-discovery-fips, rancher, gpu-operator, buildah-fips, rancher-agent, gpu-operator-fips, sriov-network-device-plugin, k8s-device-plugin, cadvisor, nvidia-container-toolkit-fips, nvidia-container-toolkit,...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: vault-fips, crossplane-provider-aws-kinesis, frankenphp-8.3, terraform-provider-random-fips, kubernetes-csi-external-resizer-fips, chronograf, crane-fips, spicedb-operator-fips, gitlab-pages-fips, flux-fips, karpenter, buildkitd, crossplane-provider-aws-qldb-fips,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator, reports-server, knative-eventing-fips, vault-fips, argo-workflows, frankenphp-8.3, keda-fips, telegraf, harbor-fips, tigera-operator, kyverno-fips, omnictl-multiarch, external-dns, external-secrets-operator, tekton-pipelines,...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: helm-operator, istio, kubescape, chartmuseum, helm-mapkubeapis, nova, pluto, helm-set-status, kots, linkerd2, helm-push, flux, trivy-operator, eksctl, cilium-cli, chart-testing, helm-docs, k8sgpt, tw, kargo, cerbos, flux-source-controller, zarf, headlamp,...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: juicefs, sops, crossplane-provider-aws-eks, docker, crossplane-provider-aws-cloudformation, crossplane-provider-aws-iam, eksctl, gitaly, percona-server-mongodb-operator, crossplane-provider-aws-firehose, falcosidekick, aws-nuke, vitess,...

GO-2024-2600 vulnerabilities

Vulnerabilities for packages: cortex, src-fingerprint, helm-operator, ytt, cni-plugins, newrelic-fluent-bit-output, chartmuseum, influx, terraform-docs, slsa-verifier, govulncheck, wazero, yam, goreleaser, bazelisk, hello-world-golang, nri-haproxy, kube-rbac-proxy, petname, eksctl, docker-cli,...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: gitlab-kas, sftpgo-plugin-auth, knative-serving, newrelic-fluent-bit-output, nats-top, cosign, terraform-docs, goreleaser, bazelisk, cilium-certgen, aws-privateca-issuer, gitaly, clickhouse-operator, kserve-modelmesh-serving, gobuster, wal-g,...

CVE-2026-64401

creationtimestamp| type| source ---|---|--- 2026-08-06 04:51:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

GHSA-67C8-VPRW-8M9V vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17662 vulnerabilities

Vulnerabilities for packages: chromium...

Photon OS 5.0: Docker PHSA-2023-5.0-91-0038

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-BC02149 Security fixes in airflow-3 3.1.8-r6

Package airflow-3 version 3.1.8-r6 fixes 13 vulnerabilities: CVE-2026-53533, CVE-2026-59885, CVE-2026-59886, CVE-2026-59890, CVE-2026-49476...

CLEANSTART-2026-JY49884 Security fixes in kibana 9.3.2-r3

Package kibana version 9.3.2-r3 fixes 45 vulnerabilities: ghsa-2w6w-674q-4c4q, ghsa-xq3m-2v4x-88gg, ghsa-pf86-5x62-jrwf, ghsa-6chq-wfr3-2hj9, ghsa-v9p9-hfj2-hcw8...

Linux Distros Unpatched Vulnerability : CVE-2026-53584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security issues,...

CVE-2026-59688

creationtimestamp| type| source ---|---|--- 2026-07-28 20:15:07+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-755 2026-07-28 20:45:10+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-7 2026-08-13...

CVE-2026-61609

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:05+00:00| published-proof-of-concept| https://github.com/pterodactyl/panel/security/advisories/GHSA-xvc3-826v-xf47 2026-07-28 17:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6ijm6f2o...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3156-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3156-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: -...