20604 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, flux-kustomize-controller, tkn, cass-operator, rancher-agent, spicedb-operator, apisix-ingress-controller, kyverno, rancher, cluster-api-aws-controller, tetragon, cert-manager-istio-csr, flux-notification-controller,...
EUVD-2026-62941
In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...
EUVD-2026-63132
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious ui-tour knowledge object that matches an auto-tour page name and share the object at the app level. The object can execute arbitrary JavaScript in the browser o...
Linux Distros Unpatched Vulnerability : CVE-2026-64730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6...
CVE-2026-76325
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious ui-tour knowledge object that matches an auto-tour page name and share the object at the app level. The object can execute arbitrary JavaScript in the browser o...
CVE-2026-76381
CVE-2026-76381 is an information disclosure vulnerability in the MS Graph for Active Directory app for Splunk SOAR , affecting versions below 1.5.2 . The root cause is that the temp_password parameter in the reset password action is not marked as a password field, causing it to be displayed in cl...
CVE-2026-76325 Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious ui-tour knowledge object that matches an auto-tour page name and share the object at the app level. The object can execute arbitrary JavaScript in the browser o...
CVE-2026-54743
Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw html object that Inferno...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: traccar, logstash-fips, conductor-fips, cassandra-reaper, nuxeo, conductor, traccar-fips, thingsboard, logstash, druid, zipkin...
GHSA-6G32-PXV4-2WFJ vulnerabilities
Vulnerabilities for packages: thingsboard, logstash, zipkin, druid, cassandra-reaper...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: thingsboard, logstash, zipkin, druid, cassandra-reaper...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: thingsboard, logstash, zipkin, druid, cassandra-reaper...
GHSA-93J5-89VC-PPH4 vulnerabilities
Vulnerabilities for packages: thingsboard, logstash, zipkin, druid, cassandra-reaper...
CVE-2026-54743 Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embed
Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw html object that Inferno...
CVE-2026-54743 Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embed
Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw html object that Inferno...
EUVD-2026-62848
Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw html object that Inferno...
CVE-2026-54743
Lemmy (a fediverse link aggregator and forum) is affected by a stored XSS in lemmy-ui prior to version 0.19.19-beta.1 . The root cause lies in src/shared/markdown.ts, where mdToHtml returns a raw __html object injected by Inferno without a sanitizer pass. The [email protected] plugin,...
MINI-MCWM-R84M-MVWM
Bulletin has no description...