esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, buildah-fips, podman, buildah, prometheus-podman-exporter, cadvisor, k8s-device-plugin-fips, nvidia-container-toolkit, rancher-agent, node-feature-discovery-fips, prometheus-podman-exporter-fips, sriov-network-device-plugin-fips, rancher,...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: vale, nginx-kubernetes-ingress, crossplane-function-go-templating-fips, kubevela, helm-diff, dataplaneapi-fips, crossplane-provider-aws-opensearchserverless-fips, cue-fips, tempo-fips, kyverno-policy-reporter-plugins-kyverno-fips, tflint-fips,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, gatekeeper, buildah, grafana-fips, containerd, docker-cli-buildx, teleport-operator-fips, tekton-pipelines-fips, loki, rancher-agent, external-secrets-operator-fips, traefik-fips, tekton-pipelines, calico-fips, fscrypt, omnictl-multiarch-fips,...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: headlamp, envoy-gateway, zarf, tw, flux-source-controller, pluto, cluster-api-helm-controller, kots, trivy, kubescape, flux-helm-controller, trivy-operator, kargo, chart-testing, helm-push, cerbos, helm-mapkubeapis, k8sgpt, eksctl, istio, nova, helm-operator,...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: vcluster, trufflehog, crossplane-provider-aws-cloudfront, trivy, kots, kubescape, spire-server, gomplate, jitsucom-bulker, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sns, boring-registry, vault-secrets-webhook, loki, juicefs, ksops, rclone,...

GO-2024-2600 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, kubernetes-csi-external-provisioner, govulncheck, gcsfuse, ctop, crossplane-provider-azure, go-licenses, nri-kafka, kor, nri-redis, argo-workflows, kubewatch, caddy, nri-haproxy, prometheus-alertmanager, shfmt, scorecard, gomplate,...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: portieris, nri-redis, argo-workflows, trivy, nri-haproxy, scorecard, slsa-verifier, rancher-loglevel, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, dbmate, redka, kubernetes-csi-driver-nfs, ghaudit, argo-cd, net-kourier, rclone, smokescreen,...

CVE-2026-64401

creationtimestamp| type| source ---|---|--- 2026-08-06 04:51:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

GHSA-67C8-VPRW-8M9V vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17662 vulnerabilities

Vulnerabilities for packages: chromium...

Photon OS 5.0: Docker PHSA-2023-5.0-91-0038

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-BC02149 Security fixes in airflow-3 3.1.8-r6

Package airflow-3 version 3.1.8-r6 fixes 13 vulnerabilities: CVE-2026-53533, CVE-2026-59885, CVE-2026-59886, CVE-2026-59890, CVE-2026-49476...

CLEANSTART-2026-JY49884 Security fixes in kibana 9.3.2-r3

Package kibana version 9.3.2-r3 fixes 45 vulnerabilities: ghsa-2w6w-674q-4c4q, ghsa-xq3m-2v4x-88gg, ghsa-pf86-5x62-jrwf, ghsa-6chq-wfr3-2hj9, ghsa-v9p9-hfj2-hcw8...

Linux Distros Unpatched Vulnerability : CVE-2026-53584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security issues,...

CVE-2026-59688

creationtimestamp| type| source ---|---|--- 2026-07-28 20:15:07+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-755 2026-07-28 20:45:10+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-7 2026-08-13...

CVE-2026-61609

creationtimestamp| type| source ---|---|--- 2026-07-28 16:35:05+00:00| published-proof-of-concept| https://github.com/pterodactyl/panel/security/advisories/GHSA-xvc3-826v-xf47 2026-07-28 17:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6ijm6f2o...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3156-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3156-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: -...