139 matches found
CVE-2026-78414
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414
A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...
CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
EUVD-2026-64898
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
PT-2026-80899
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: hubble, runc, gitaly, kuma, hubble-ui, nerdctl, kubescape-operator, kubescape, vitess, cilium, docker, splunk-otel-collector, containerd, delve, witness, k3s, falcoctl...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: hubble, runc, gitaly, kuma, hubble-ui, nerdctl, kubescape-operator, kubescape, vitess, cilium, docker, splunk-otel-collector, containerd, delve, witness, k3s, falcoctl...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: hubble, runc, gitaly, kuma, hubble-ui, nerdctl, kubescape-operator, kubescape, vitess, cilium, docker, splunk-otel-collector, containerd, delve, witness, k3s, falcoctl...
GO-2026-4309 vulnerabilities
Vulnerabilities for packages: witness, falcoctl, flux-source-controller, cloudbeat-fips, kyverno, falcoctl-fips, kyverno-notation-aws-fips, tkn-fips, kyverno-policy-reporter-plugins-kyverno, cloudbeat, tekton-chains-fips, kyverno-notation-aws, ratify-fips, ratify, gitsign, teleport, tkn,...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: eksctl, minio, goreleaser, k8sgpt, teleport, datadog-agent, gitlab-runner, dgraph, opentelemetry-collector-contrib, terraform-mcp-server, malcontent, grafana, lazygit, nuclei, weaviate, grafana-alloy, prometheus, mcp-grafana, maru, dagger, rclone, witness, terragrunt...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: spire-server, kyverno-notation-aws, policy-controller, cosign, kots, tfsec, trivy, witness, conftest...
GO-2026-4377 vulnerabilities
Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, docker, trivy, ko, gh, gitsign, kyverno-notation-aws, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, sigstore-scaffolding, policy-controller, vexctl, skaffold, buildkitd, falcoctl,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: grype, teleport, syft, flux-source-controller, kubescape, bom, gitlab-runner, melange, chezmoi, xeol, tfsec, trivy, gptscript, wolfictl, scorecard, pulumi, flux, osv-scanner, rancher-fleet, gitsign, nuclei, gitaly, gitea, grafana-alloy, crossplane,...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: buildah, gitsign, kyverno-notation-aws, tekton-chains, flux-source-controller, kubescape, kyverno, ratify, slsa-verifier, podman, aactl, kots, zarf, falco-no-driver, skopeo, undock, witness, falcoctl...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: grype, k8sgpt, kubescape, prometheus-operator, crossplane-provider-aws-rds, chezmoi, crossplane-provider-aws-cloudformation, crossplane-provider-aws-elasticache, gh, pulumi, fulcio, crossplane-provider-aws-s3, gatus, crossplane-provider-aws-cloudfront,...
GO-2025-4193 vulnerabilities
Vulnerabilities for packages: flux-source-controller, kubescape, podman, portieris, gitsign, kyverno-notation-aws, aactl, zarf, falco-no-driver, witness, tekton-chains, sigstore-scaffolding, slsa-verifier, ratify, vexctl, undock, falcoctl, buildah, cosign, kots, skopeo, tkn...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, ko, gh, gitsign, kyverno-notation-aws, aactl, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, sigstore-scaffolding, policy-controller, ratify, docker-cli-buildx, vexctl, skaffold, falcoctl,...
GO-2026-4358 vulnerabilities
Vulnerabilities for packages: goreleaser, flux-source-controller, kubescape, podman, xeol, trivy, ko, gh, fulcio, rekor, portieris, gitsign, kyverno-notation-aws, aactl, tflint, zarf, falco-no-driver, timestamp-authority, witness, guac, neuvector-sigstore-interface, tekton-chains,...