13267 matches found
CVE-2026-36438
CVE-2026-36438: Sensitive information via password reset The Intelbras VIP 1230 B/D G4 versions prior to 6 allows a remote attacker to obtain sensitive information of administrator account via password reset functionality under OutsideCmd file. Discovered by Henrique Koji, Feb 2026. References:...
AZL-100935 CVE-2026-83530 affecting package kube-vip-cloud-provider 0.0.10-8
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...
CVE-2018-4878-
-cms Server cluster batch identification of cms, batch backup search, batch injection. VIP group version backup...
AZL-99246 CVE-2026-84304 affecting package kube-vip-cloud-provider 0.0.10-8
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...
AZL-98376 CVE-2026-37236 affecting package kube-vip-cloud-provider 0.0.10-8
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: keda, k3s, cluster-api, cilium, spicedb-operator, kubernetes-csi-external-provisioner, k8ssandra-client, spqr, kuma, kubernetes, calico, cert-manager, grafana, cass-operator, datadog-operator, cert-manager-webhook-pdns, kubescape, zot, vcluster,...
CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8
CVE-2026-73500 affecting package kube-vip-cloud-provider for versions less than 0.0.10-8. A patched version of the package is available...
GO-2026-5954 vulnerabilities
Vulnerabilities for packages: kube-vip, cilium-cli, kube-vip-fips...
GO-2026-4736 vulnerabilities
Vulnerabilities for packages: kube-vip, cilium-cli, kube-vip-fips...
GO-2026-5954 vulnerabilities
Vulnerabilities for packages: cilium-cli, kube-vip...
GO-2026-4736 vulnerabilities
Vulnerabilities for packages: cilium-cli, kube-vip...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: harbor-registry, dbmate, manifest-tool, s5cmd, tfsec, nri-f5, kubeflow, osv-scanner, k3s, headlamp, http-echo, x509-certificate-exporter, nri-haproxy, src, ingress-nginx-controller, kubelet-csr-approver, crossplane-provider-aws-ec2, wave, pgtimetable, steampipe,...
CLEANSTART-2026-WS96350 Security fixes in kube-vip-fips 1.0.4-r1
Package kube-vip-fips version 1.0.4-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-p77j-4mvh-x3m3, CVE-2026-33186...
CLEANSTART-2026-LO17389 Security fixes in kube-vip-fips 1.2.1-r1
Package kube-vip-fips version 1.2.1-r1 fixes 1 vulnerabilities: CVE-2026-42505...
CLEANSTART-2026-YC19931 Security fixes in kube-vip-fips 1.1.2-r1
Package kube-vip-fips version 1.1.2-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
EUVD-2026-55309
In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devmkzalloc in vipprobeslice In vipprobeslice, the error check for devmkzalloc incorrectly uses PTRERRORZERO which returns 0 for NULL pointer. Return -ENOMEM for devmkzalloc failure...
CLEANSTART-2026-ZW66721 Security fixes in kube-vip 1.0.1-r0
Package kube-vip version 1.0.1-r0 fixes 1 vulnerabilities: CVE-2025-61729...
CLEANSTART-2026-LX01564 Security fixes in kube-vip 0.9.2-r0
Package kube-vip version 0.9.2-r0 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...