GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: volsync-fips, aws-sigv4-proxy, kubernetes-secret-generator, tekton-pipelines, etcd-fips, kube-arangodb, flux-fips, metrics-server, manifest-tool, portieris, cloud-provider-gcp-cloud-controller-manager-fips, cert-manager-webhook-pdns, prometheus-statsd-exporter, k3d,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: volsync-fips, aws-sigv4-proxy, kubernetes-secret-generator, tekton-pipelines, etcd-fips, kube-arangodb, flux-fips, metrics-server, manifest-tool, portieris, cloud-provider-gcp-cloud-controller-manager-fips, cert-manager-webhook-pdns, prometheus-statsd-exporter, k3d,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: aws-sigv4-proxy, kubernetes-secret-generator, tekton-pipelines, etcd-fips, kube-arangodb, flux-fips, metrics-server, manifest-tool, portieris, cloud-provider-gcp-cloud-controller-manager-fips, cert-manager-webhook-pdns, prometheus-statsd-exporter, k3d,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: volsync-fips, aws-sigv4-proxy, kubernetes-secret-generator, tekton-pipelines, etcd-fips, kube-arangodb, flux-fips, metrics-server, manifest-tool, portieris, cloud-provider-gcp-cloud-controller-manager-fips, cert-manager-webhook-pdns, prometheus-statsd-exporter, k3d,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: volsync-fips, aws-sigv4-proxy, kubernetes-secret-generator, tekton-pipelines, etcd-fips, kube-arangodb, flux-fips, metrics-server, manifest-tool, portieris, cloud-provider-gcp-cloud-controller-manager-fips, cert-manager-webhook-pdns, prometheus-statsd-exporter, k3d,...

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

...

Jenkins JDepend Plugin vulnerable to XML external entity attacks

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file...

GHSA-X6FH-7QMF-69XH vulnerabilities

Vulnerabilities for packages: step-issuer, caddy, step-ca, step...

CVE-2025-62820 vulnerabilities

Vulnerabilities for packages: step-issuer, caddy, step-ca, step...

CVE-2025-62820 vulnerabilities

Vulnerabilities for packages: caddy-fips, step-ca, step, step-issuer-fips, step-fips, step-ca-fips, caddy, step-issuer...

GHSA-X6FH-7QMF-69XH vulnerabilities

Vulnerabilities for packages: caddy-fips, step-ca, step, step-issuer-fips, step-fips, step-ca-fips, caddy, step-issuer...

CVE-2025-10861

CVE-2025-10861: Unauthenticated SSRF in the WordPress plugin “Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers” affecting versions up to and including 2.1.4 due to insufficient URL validation. Exploitation could allow the server to make requests t...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

EUVD-2025-35706

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-60932

Multiple stored cross-site scripting XSS vulnerabilities in the Current Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...

EUVD-2025-35170

Multiple stored cross-site scripting XSS vulnerabilities in the Current Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...

CVE-2025-60932

Multiple stored cross-site scripting XSS vulnerabilities in the Current Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...

CVE-2025-60933

CVE-2025-60933 affects HR Performance Solutions Performance Pro v3.19.17. The vulnerability is stored XSS in the Future Goals function, allowing an attacker to inject arbitrary web scripts/HTML via crafted payloads into Goal Name, Goal Notes, Action Step Name, Action Step Description, Note Name, ...