Lucene search
+L

1254 matches found

RedhatCVE
RedhatCVE
added 2026/01/22 8:59 p.m.6 views

CVE-2026-23960

A flaw was found in Argo Workflows, an open-source container-native workflow engine for orchestrating parallel jobs on Kubernetes. This stored Cross-Site Scripting XSS vulnerability in the artifact directory listing allows any workflow author to execute unauthorized JavaScript code in another...

7.3CVSS5.8AI score0.00337EPSS
SaveExploits1References8
Chainguard
Chainguard
added 2026/01/22 7:17 p.m.23 views

CVE-2026-24001 vulnerabilities

Vulnerabilities for packages: tileserver-gl, saf, prism, renovate, redisinsight, npm, graalvm, thingsboard-fips, kubeflow-katib, vitess, ts-patch, semaphore, sqlpad, langfuse-fips, drupal, argo-workflows, grafana, tileserver-gl-fips, grafana-fips, thingsboard, librechat, actions-runner, langfuse...

7.5CVSS5.5AI score0.00562EPSS
SaveExploits0
Snyk
Snyk
added 2026/01/21 10:46 p.m.2 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rendering of object names in the GetArtifactFile function. An attacker can execute arbitrary JavaScript in another user's browser by crafting malicious workflows that produce an HTML artifact enabling...

9CVSS6AI score0.00337EPSS
SaveExploits1References2
NVD
NVD
added 2026/01/21 10:15 p.m.11 views

CVE-2026-23960

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo...

7.3CVSS0.00337EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
added 2026/01/21 10:2 p.m.3 views

CVE-2026-23960 Argo Workflows affected by stored XSS in the artifact directory listing

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo...

7.3CVSS5.8AI score0.00337EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/21 10:2 p.m.5 views

CVE-2026-23960

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo...

7.3CVSS5.6AI score0.00337EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/01/21 10:2 p.m.11 views

CVE-2026-23960 Argo Workflows affected by stored XSS in the artifact directory listing

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo...

7.3CVSS5.8AI score
SaveExploits0References10
CVE
CVE
added 2026/01/21 10:2 p.m.36 views

CVE-2026-23960

CVE-2026-23960 affects Argo Workflows prior to versions 3.6.17 and 3.7.8. A stored XSS vulnerability in the artifact directory listing can cause arbitrary JavaScript to run in another user’s browser within the Argo Server origin, enabling actions with the victim’s privileges. Affected component: ...

7.3CVSS5.8AI score0.00337EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2026/01/21 10:2 p.m.29 views

CVE-2026-23960 Argo Workflows affected by stored XSS in the artifact directory listing

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.6.17 and 3.7.8, stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo...

7.3CVSS0.00337EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/21 10:0 p.m.9 views

GHSA-CV78-6M8Q-PH82 Argo Workflows affected by stored XSS in the artifact directory listing

Summary Stored XSS in the artifact directory listing allows any workflow author to execute arbitrary JavaScript in another user’s browser under the Argo Server origin, enabling API actions with the victim’s privileges. Details The directory listing response in server/artifacts/artifactserver.go...

7.3CVSS5.8AI score0.00337EPSS
SaveExploits1References7
EUVD
EUVD
added 2026/01/21 10:0 p.m.9 views

EUVD-2026-3596

Argo Workflows affected by stored XSS in the artifact directory listing...

7.3CVSS5.3AI score0.00337EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/01/21 12:0 a.m.12 views

Argo Workflows Cross-Site Script Vulnerabilities

Argo Workflows is an open-source, container-native workflow engine for Kubernetes, part of the Argo project. Versions prior to Argo Workflows 3.6.17 and 3.7.8 had a cross-site scripting vulnerability. This vulnerability stemmed from the presence of a stored cross-site script in the artifact...

7.3CVSS5.8AI score0.00337EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/01/20 7:52 p.m.15 views

AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent

Triaging security alerts is often very repetitive because false positives are caused by patterns that are obvious to a human auditor but difficult to encode as a formal code pattern. But large language models LLMs excel at matching the fuzzy patterns that traditional tools struggle with, so we at...

6.3AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/01/20 12:0 a.m.10 views

Unpacking Security Scanners for GitHub Actions Workflows

GitHub Actions is a widely used platform that allows developers to automate the build and deployment of their projects through configurable workflows. As the platform's popularity continues to grow, it has become a target of choice for recent software supply chain attacks. These attacks exploit...

5.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/01/15 11:0 a.m.7 views

4 Outdated Habits Destroying Your SOC's MTTR in 2026

It's 2026, yet many SOCs are still operating the way they did years ago, using tools and processes designed for a very different threat landscape. Given the growth in volumes and complexity of cyber threats, outdated practices no longer fully support analysts' needs, staggering investigations and...

7.1AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/14 5:52 p.m.216 views

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

⚡ Pentest Automation !Versionhttps://img.shields.io/badg...

10CVSS9.2AI score0.99999EPSS
SaveExploits359
RedhatCVE
RedhatCVE
added 2026/01/13 10:53 p.m.8 views

CVE-2025-14718

The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00296EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/01/12 1:41 p.m.30 views

⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More

This week made one thing clear: small oversights can spiral fast. Tools meant to save time and reduce friction turned into easy entry points once basic safeguards were ignored. Attackers didn't need novel tricks. They used what was already exposed and moved in without resistance. Scale amplified...

10CVSS8.8AI score0.97875EPSS
SaveExploits84
Packet Storm News
Packet Storm News
added 2026/01/12 12:0 a.m.8 views

Memory-Based Malware Detection under Limited Data Conditions: A Comparative Evaluation of TabPFN and Ensemble Models

Artificial intelligence and machine learning have significantly advanced malware research by enabling automated threat detection and behavior analysis. However, the availability of exploitable data is limited, due to the absence of large datasets with real-world data. Despite the progress of AI i...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/12 12:0 a.m.4 views

n8n Node.js Package 1.65.0 < 1.121.0 Improper Access Control (Ni8Mare)

The version of the n8n Node.js Package installed on the remote host is prior to 1.121.0. It is, therefore, affected by an improper access control vulnerability: - A vulnerability in n8n allows an attacker to access files on the underlying server through execution of certain form-based workflows. ...

10CVSS8.7AI score0.71647EPSS
SaveExploits22References3
Rows per page
Query Builder