GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: metrics-server, aws-node-termination-handler, influxd, terraform-provider-sendgrid, rancher-security-scan, slsa-verifier, timoni, wait-for-port, pvc-autoresizer, sonobuoy, dataplaneapi-fips, docker-machine-driver-harvester, terraform-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: metrics-server, aws-node-termination-handler, influxd, terraform-provider-sendgrid, rancher-security-scan, aws-eks-pod-identity-agent-fips, slsa-verifier, timoni, pulumi-language-java, wait-for-port, xeol, pvc-autoresizer, sonobuoy, dataplaneapi-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: metrics-server, aws-node-termination-handler, influxd, terraform-provider-sendgrid, rancher-security-scan, slsa-verifier, timoni, wait-for-port, pvc-autoresizer, sonobuoy, dataplaneapi-fips, docker-machine-driver-harvester, terraform-fips,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: metrics-server, aws-node-termination-handler, influxd, terraform-provider-sendgrid, rancher-security-scan, slsa-verifier, timoni, wait-for-port, pvc-autoresizer, sonobuoy, dataplaneapi-fips, docker-machine-driver-harvester, terraform-fips,...

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

...

Jenkins JDepend Plugin vulnerable to XML external entity attacks

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file...

XXE vulnerability in jdepend

jdepend 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to configure input files for the "Report JDepend" step to have Jenkins parse a crafted file that uses extern...

Is Your Google Workspace as Secure as You Think it is?

The New Reality for Lean Security Teams If you’re the first security or IT hire at a fast-growing startup, you’ve likely inherited a mandate that’s both simple and maddeningly complex: secure the business without slowing it down. Most organizations using Google Workspace start with an environment...

GHSA-X6FH-7QMF-69XH vulnerabilities

Vulnerabilities for packages: step-issuer, step-ca, caddy, step...

CVE-2025-62820 vulnerabilities

Vulnerabilities for packages: step-issuer, step-ca, caddy, step...

GHSA-X6FH-7QMF-69XH vulnerabilities

Vulnerabilities for packages: step-issuer, step-issuer-fips, caddy, step, step-fips, step-ca-fips, step-ca, caddy-fips...

CVE-2025-62820 vulnerabilities

Vulnerabilities for packages: step-issuer, step-issuer-fips, caddy, step, step-fips, step-ca-fips, step-ca, caddy-fips...

CVE-2025-10861

CVE-2025-10861: Unauthenticated SSRF in the WordPress plugin “Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers” affecting versions up to and including 2.1.4 due to insufficient URL validation. Exploitation could allow the server to make requests t...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-10861: Server-Side Request Forgery (SSRF)

The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.1.4. This is due to insufficient validation on the URLs supplied via the URL parameter...

EUVD-2025-35706

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-57240: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-60932

Multiple stored cross-site scripting XSS vulnerabilities in the Current Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...