132 matches found
CVE-2026-78414
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414
A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...
EUVD-2026-64898
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
PT-2026-80899
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: kubescape, hubble, hubble-ui, falcoctl, kubescape-operator, k3s, splunk-otel-collector, vitess, delve, kuma, containerd, runc, gitaly, nerdctl, docker, witness...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: kubescape, hubble, hubble-ui, falcoctl, kubescape-operator, k3s, splunk-otel-collector, vitess, delve, kuma, containerd, runc, gitaly, nerdctl, docker, witness...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: kubescape, hubble, hubble-ui, falcoctl, kubescape-operator, k3s, splunk-otel-collector, vitess, delve, kuma, containerd, runc, gitaly, nerdctl, docker, witness...
GO-2026-4309 vulnerabilities
Vulnerabilities for packages: falcoctl, kyverno, gitsign, kyverno-policy-reporter-plugins-kyverno, ratify-fips, goreleaser, falcoctl-fips, image-factory-fips, policy-controller-fips, tekton-chains-fips, teleport, kyverno-notation-aws-fips, cloudbeat-fips, tkn, aactl, cloudbeat, kyverno-fips,...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: weaviate, opentelemetry-collector-contrib, terragrunt, dgraph, rclone, grafana, teleport, witness, k3s, malcontent, dagger, loki, prometheus, cri-tools, nuclei, vcluster, goreleaser, minio, grafana-alloy, k8sgpt, gitlab-runner, mcp-grafana, ollama, lazygit, redpanda,...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: spire-server, kyverno-notation-aws, cosign, trivy, policy-controller, tfsec, conftest, kots, witness...
GO-2026-4377 vulnerabilities
Vulnerabilities for packages: spire-server, falcoctl, vexctl, trivy, skaffold, buildkitd, zot, teleport, sigstore-scaffolding, flux-source-controller, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, docker, kubescape, goreleaser, tflint, kyverno-notation-aws,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: bom, kargo, xeol, syft, argo-events, argocd-image-updater, crossplane, steampipe, trivy, snyk-cli, skaffold, zot, teleport, gomplate, flux-source-controller, cerbos, trivy-operator, k9s, dagger, gitsign, external-secrets-operator, pulumi-language-java, argo-workflows...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: ratify, kubescape, flux-source-controller, kyverno, falcoctl, kyverno-notation-aws, slsa-verifier, skopeo, witness, tekton-chains, podman, gitsign, buildah, kots, zarf, undock, aactl...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: syft, argocd-image-updater, docker-compose, witness, slsa-verifier, k9s, dagger, external-secrets-operator, pulumi-language-java, tkn, docker, glab, tw, flux-image-automation-controller, nuclei, crossplane-provider-family-aws, osv-scanner, argo-cd,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: spire-server, falcoctl, docker-cli-buildx, vexctl, skaffold, zot, teleport, sigstore-scaffolding, flux-source-controller, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, aactl, ratify, kubescape, goreleaser, tflint, kyverno-notation-aws, cosign,...
GO-2025-4193 vulnerabilities
Vulnerabilities for packages: falcoctl, vexctl, falco-no-driver, sigstore-scaffolding, flux-source-controller, slsa-verifier, tekton-chains, gitsign, zarf, tkn, undock, aactl, ratify, kubescape, skopeo, kots, kyverno-notation-aws, cosign, podman, portieris, buildah, witness...
GO-2026-4358 vulnerabilities
Vulnerabilities for packages: xeol, spire-server, falcoctl, vexctl, trivy, docker-compose, skaffold, buildkitd, zot, falco-no-driver, sigstore-scaffolding, flux-source-controller, fulcio, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, rekor, undock...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: spire-server, docker-cli-buildx, crossplane, falcoctl, vexctl, trivy, skaffold, buildkitd, zot, teleport, sigstore-scaffolding, flux-source-controller, slsa-verifier, trivy-operator, tekton-chains, neuvector-sigstore-interface, gitsign, zarf, tkn, docker, aactl,...