Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 79 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-5r4w-85f3-pw66 |
10.0 (3.1)
7.8 (4.0)
|
Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass | 2026-06-16T19:02:20Z | 2026-09-01T14:06:28Z |
| ghsa-xcg3-vhqm-f4qw |
7.7 (3.1)
8.3 (4.0)
|
Kyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url t… | 2026-09-01T12:31:51Z | 2026-09-01T12:31:51Z |
| ghsa-r97f-5q78-rq8c |
7.1 (3.1)
7.1 (4.0)
|
LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates… | 2026-09-01T12:31:51Z | 2026-09-01T12:31:51Z |
| ghsa-q8fv-357q-9mmj |
9.0 (3.1)
9.4 (4.0)
|
Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in … | 2026-09-01T12:31:51Z | 2026-09-01T12:31:51Z |
| ghsa-q5v3-pp68-6crj |
7.7 (3.1)
6.9 (4.0)
|
Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall fe… | 2026-09-01T12:31:51Z | 2026-09-01T12:31:51Z |
| ghsa-jjvr-265m-qmq9 |
8.6 (4.0)
|
LibreNMS versions >= 23.10.0 and < 26.2.0 (fixed in 26.4.0) contain an authenticated OS command inj… | 2026-09-01T12:31:51Z | 2026-09-01T12:31:51Z |
| ghsa-4x34-82r8-65cf |
7.7 (3.1)
8.3 (4.0)
|
Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to out… | 2026-09-01T12:31:51Z | 2026-09-01T12:31:51Z |
| ghsa-43px-cc38-6vvc |
5.8 (4.0)
|
LibreNMS through 26.2.0 contains a stored cross-site scripting vulnerability in legacy PHP template… | 2026-09-01T12:31:51Z | 2026-09-01T12:31:51Z |
| ghsa-w48h-3prc-xgxg |
5.3 (3.1)
|
The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Admini… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-rpxm-6hm8-cc7x |
8.1 (3.1)
7.2 (4.0)
|
AVideo contains a cross-site request forgery vulnerability in plugin/API/set.json.php that allows a… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-r436-6p4j-frwf |
8.1 (3.1)
9.2 (4.0)
|
LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by t… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-pvwj-jwv3-68ww |
4.8 (3.1)
4.8 (4.0)
|
LibreNMS versions <= 26.4.0 contain a stored cross-site scripting vulnerability in the graph_descr.… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-p7jp-qp65-h4xf |
7.2 (3.1)
8.7 (4.0)
|
LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutControlle… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-m7p6-5q89-gw3f |
8.2 (3.1)
8.8 (4.0)
|
AVideo contains a missing authentication vulnerability in plugin/Live/on_publish.php that allows un… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-6rfj-pjgc-mv6h |
8.8 (3.1)
|
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with l… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-3cvh-rhc6-7rhc |
6.1 (3.1)
5.3 (4.0)
|
LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages wh… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-2xrx-hjpp-64rp |
9.8 (3.1)
|
The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Accou… | 2026-09-01T12:31:50Z | 2026-09-01T12:31:50Z |
| ghsa-x85p-7rrx-px32 |
3.7 (3.1)
9.3 (4.0)
|
Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE… | 2026-09-01T12:31:49Z | 2026-09-01T12:31:49Z |
| ghsa-q8f6-8cj7-hxqf |
6.5 (3.1)
|
An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP … | 2026-09-01T12:31:49Z | 2026-09-01T12:31:49Z |
| ghsa-m4j2-w8wf-vp83 |
8.7 (4.0)
|
A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting… | 2026-09-01T12:31:49Z | 2026-09-01T12:31:49Z |
| ghsa-h952-ggq2-fp3c |
7.4 (3.1)
2.1 (4.0)
|
A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the fu… | 2026-09-01T12:31:49Z | 2026-09-01T12:31:49Z |
| ghsa-g7vr-5j65-c83q |
5.5 (3.1)
|
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulati… | 2026-09-01T12:31:49Z | 2026-09-01T12:31:49Z |
| ghsa-8g8h-v9pm-r6xg |
6.5 (3.1)
6.9 (4.0)
|
Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call fun… | 2026-09-01T12:31:49Z | 2026-09-01T12:31:49Z |
| ghsa-wvvp-v69c-rj86 |
9.4 (4.0)
|
A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows a… | 2026-09-01T12:31:48Z | 2026-09-01T12:31:48Z |
| ghsa-jrvv-5x23-qh48 |
5.5 (3.1)
|
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulati… | 2026-09-01T12:31:48Z | 2026-09-01T12:31:48Z |
| ghsa-hhmf-6c6g-6xc3 |
8.8 (3.1)
8.7 (4.0)
|
A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Di… | 2026-09-01T12:31:48Z | 2026-09-01T12:31:48Z |
| ghsa-8m2w-3vrx-mj4w |
5.5 (3.1)
|
NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. … | 2026-09-01T12:31:48Z | 2026-09-01T12:31:48Z |
| ghsa-vq42-9gx3-gj3v |
6.4 (3.1)
|
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cro… | 2026-09-01T12:31:47Z | 2026-09-01T12:31:47Z |
| ghsa-rjwh-46cm-g6mv |
7.5 (3.1)
7.5 (4.0)
|
Improper neutralization of special elements used in an OS command in yast2-samba-client allows an a… | 2026-09-01T12:31:47Z | 2026-09-01T12:31:47Z |
| ghsa-qvch-9vjh-pr6p |
8.0 (3.1)
8.6 (4.0)
|
An OS command injection vulnerability was found in yast2-users. When displaying the "Password Setti… | 2026-09-01T12:31:47Z | 2026-09-01T12:31:47Z |