18691 matches found
CVE-2026-17760
A side-channel information leakage flaw was found in the NoStatePrefetch component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506473189...
CVE-2026-13379
The Windows interactive service in OpenVPN 2.7alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process...
SUSE CVE-2026-46403
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes ExecuteReadOnlyWithTypedArguments as a read-only execution mechanism. The hook saves the previous read-only state, sets runtime.SetReadOnlytrue, executes the destination context, and then restores t...
SUSE CVE-2026-53935
Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...
SUSE CVE-2026-55883
Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.24.0 through 0.37.3, the Tilt HUD WebSocket at /ws/view is gated by a CSRF token, but the token is served by the unauthenticated /api/websockettoken endpoint and the upgrader accepts clients that omit an Origin...
SUSE CVE-2026-55884
Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.20.8 through 0.37.3, the Tilt HUD HTTP server registers handlers on a gorilla/mux router with no authenticating middleware. When the HUD is bound to a non-loopback address, an unauthenticated network caller can...
EUVD-2026-50563
OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion Unbounded Map Growth...
GHSA-XPXJ-F2FM-RQCH OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)
Summary OliveTin's OAuth2 login handler stores per-login state in an in-memory map registeredStates that grows unboundedly. States are added on every /oauth/login request but are never deleted or expired. An unauthenticated attacker can send millions of requests to /oauth/login to fill the map wi...
OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)
Summary OliveTin's OAuth2 login handler stores per-login state in an in-memory map registeredStates that grows unboundedly. States are added on every /oauth/login request but are never deleted or expired. An unauthenticated attacker can send millions of requests to /oauth/login to fill the map wi...
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A...
CLEANSTART-2026-YN39605 Security fixes in kube-state-metrics-fips 2.17.0-r0
Package kube-state-metrics-fips version 2.17.0-r0 fixes 1 vulnerabilities: ghsa-2464-837c-4c3m...
CLEANSTART-2026-IV23706 Security fixes in kube-state-metrics 2.19.1-r0
Package kube-state-metrics version 2.19.1-r0 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...
CLEANSTART-2026-XU92282 Security fixes in kube-state-metrics 2.15.0-r1
Package kube-state-metrics version 2.15.0-r1 fixes 15 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499...
CLEANSTART-2026-QD19370 Security fixes in kube-state-metrics-fips 2.15.0-r0
Package kube-state-metrics-fips version 2.15.0-r0 fixes 6 vulnerabilities: CVE-2025-61727, CVE-2025-61729, ghsa-6v2p-p543-phr9, ghsa-hcg3-q754-cr77, ghsa-qxp5-gwg8-xv66...
CLEANSTART-2026-AT86413 Security fixes in kube-state-metrics 2.15.0-r0
Package kube-state-metrics version 2.15.0-r0 fixes 1 vulnerabilities: CVE-2025-22868...
CLEANSTART-2026-XF99533 Security fixes in kube-state-metrics 2.17.0-r3
Package kube-state-metrics version 2.17.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...
CLEANSTART-2026-IF30502 Security fixes in kube-state-metrics 2.10.1-r1
Package kube-state-metrics version 2.10.1-r1 fixes 24 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...
CLEANSTART-2026-GX93192 Security fixes in kube-state-metrics 2.10.1-r2
Package kube-state-metrics version 2.10.1-r2 fixes 19 vulnerabilities: CVE-2026-39835, CVE-2026-39828, CVE-2026-39827, CVE-2026-25681, CVE-2026-27136...