319555 matches found
SQL Injection
Spring Data Relational is vulnerable to SQL Injection. The vulnerability is due to insufficient escaping of wildcard characters in user-controlled input, which allows an attacker to inject wildcard patterns and perform boolean-based blind data inference...
Malicious code in utils-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in thepackagethatworks_ (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...
GO-2025-4261 vulnerabilities
Vulnerabilities for packages: gitea-fips...
GO-2026-5887 vulnerabilities
Vulnerabilities for packages: gatus-fips, gatus...
GO-2026-4753 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, omni-fips, dex-fips, mattermost, omni, gotrue, dex, commercial-grafana, mattermost-fips, neuvector-fips, zitadel, rancher, neuvector, rancher-agent, gotrue-fips, teleport...
GO-2026-5224 vulnerabilities
Vulnerabilities for packages: cloudbeat-fips, cloudbeat, vault-fips, authentik-fips, azure-service-operator, rancher, azure-service-operator-fips, rancher-agent, vault, authentik...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: timoni, argo-events-fips, k9s, syft, gitsign, nemo, skaffold, task, kaniko-fips, kubescape, gitea, flux-image-automation-controller-fips, grype, k8sgpt, src-fingerprint, zot, crossplane, goreleaser, argo-events, flux-source-controller-fips, zarf, snyk-cli, go-license...
GO-2026-5597 vulnerabilities
Vulnerabilities for packages: grafana, argo-cd-fips, syft, nemo, seaweedfs-rocksdb-fips, terragrunt-fips, external-secrets-operator, syft-fips, gitlab-rails-ce-fips, chainloop-cli, flux-fips, cerbos-fips, skaffold-fips, rclone, terragrunt, amazon-ssm-agent, external-secrets-operator-fips, flux,...
GO-2026-4602 vulnerabilities
Vulnerabilities for packages: kubescape-operator-fips, nri-kafka-fips, policy-controller-fips, terraform-provider-time, rancher-security-scan-fips, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, victorialogs, amazon-cloudwatch-agent-operator-fips, google-guest-agent, kapp-controller,...
GO-2026-5496 vulnerabilities
Vulnerabilities for packages: apko-fips, terragrunt-fips, flux-image-automation-controller-fips, external-secrets-operator, xeol, crossplane, goreleaser, flux-fips, cerbos-fips, kargo, pulumi-language-java, argocd-image-updater, redpanda-console, kubevela-fips, flux-image-automation-controller,...
GO-2026-4339 vulnerabilities
Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, terraform-provider-time, rancher-security-scan-fips, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, kapp-controller, spiffe-helper-fips, litestream, mc,...
GO-2025-3373 vulnerabilities
Vulnerabilities for packages: policy-controller-fips, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, kapp-controller, spiffe-helper-fips, litestream, temporal-ui-server-fips, k8ssandra-client, docker-compose, harbor-scanner-trivy-fips, falcosidekick, git-credential-oauth,...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: policy-controller-fips, kyverno-policy-reporter-ui-fips, weaviate, ollama, temporal-ui-server-fips, litestream, mc, k8ssandra-client, docker-compose, ksops, harbor-scanner-trivy-fips, falcosidekick, helm-operator-fips, harbor-cli, kubernetes-csi-driver-hostpath,...
GO-2024-2718 vulnerabilities
Vulnerabilities for packages: policy-controller-fips, tekton-chains-fips, gitsign, skaffold, vexctl, tkn, kubescape, zot, policy-controller, zarf, goreleaser, ko, spire-server-fips, neuvector-sigstore-interface, aactl, melange, falcoctl, wolfictl, ko-fips, chainctl, tkn-fips, slsa-verifier,...
GO-2025-3841 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GO-2025-3416 vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui...