Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Improper Authorization	github.com/inspektor-gadget/inspektor-gadget/pkg/operators/oci-handler>=0.31.0 <0.40.0	Go	2 Jun 2025
H Improper Certificate Validation	github.com/rancher/steve/pkg/ui>=0.2.0 <0.2.1>=0.3.0 <0.3.3>=0.4.0 <0.4.4>=0.5.0 <0.5.13	Go	2 Jun 2025
M Improper Certificate Validation	github.com/rancher/fleet/internal/helmdeployer>=0.9.0-rc.1 <0.10.12>=0.11.0-rc.1 <0.11.7>=0.12.0-rc.1 <0.12.2	Go	2 Jun 2025
M Deserialization of Untrusted Data	wazuh/wazuh[4.4.0,4.9.1)	Unmanaged (C/C++)	2 Jun 2025
H Out-of-Bounds	meshtastic/firmware[,2.6.2)	Unmanaged (C/C++)	2 Jun 2025
H Use After Free	exim/exim[,4.98.2)	Unmanaged (C/C++)	2 Jun 2025
M Overly Restrictive Regular Expression	envoyproxy/envoy[,1.31.8)[1.32.0,1.32.6)[1.33.0,1.33.3)[1.34.0,1.34.1)	Unmanaged (C/C++)	2 Jun 2025
M NULL Pointer Dereference	ffmpeg[,7.1.1)	Conan	2 Jun 2025
M NULL Pointer Dereference	ffmpeg[,7.1.1)	Unmanaged (C/C++)	2 Jun 2025
M Cross-site Scripting (XSS)	web2py[0,]	pip	2 Jun 2025
H SQL Injection	apache-superset[,4.1.2)	pip	1 Jun 2025
M Insecure Inherited Permissions	django-helpdesk[,1.0.0)	pip	1 Jun 2025
H Arbitrary Code Injection	aim[0,]	pip	1 Jun 2025
H Trust Boundary Violation	github.com/cli/go-gh/pkg/auth<2.12.1	Go	1 Jun 2025
H Trust Boundary Violation	github.com/cli/go-gh/v2/pkg/auth<2.12.1	Go	1 Jun 2025
H Stack-based Buffer Overflow	antirez/redis[7.0.0,8.0.2)	Unmanaged (C/C++)	1 Jun 2025
C Privilege Chaining	github.com/gardener/gardener/plugin/pkg/shoot/validator<1.116.4>=1.117.0 <1.117.5>=1.118.0 <1.118.2	Go	1 Jun 2025
C Privilege Chaining	github.com/gardener/gardener/plugin/pkg/project/validator<1.116.4>=1.117.0 <1.117.5>=1.118.0 <1.118.2	Go	1 Jun 2025
C Privilege Chaining	github.com/gardener/gardener/plugin/pkg/global/resourcereferencemanager<1.116.4>=1.117.0 <1.117.5>=1.118.0 <1.118.2	Go	1 Jun 2025
C Privilege Chaining	github.com/gardener/gardener/pkg/apiserver/registry/security/credentialsbinding<1.116.4>=1.117.0 <1.117.5>=1.118.0 <1.118.2	Go	1 Jun 2025
C Privilege Chaining	github.com/gardener/gardener/pkg/apiserver/registry/core/secretbinding<1.116.4>=1.117.0 <1.117.5>=1.118.0 <1.118.2	Go	1 Jun 2025
H Cross-site Scripting (XSS)	zabbix/zabbix[,6.0.37rc1)[6.4.0,6.4.21rc1)[7.0.0,7.0.7rc1)	Unmanaged (C/C++)	1 Jun 2025
M Allocation of Resources Without Limits or Throttling	zabbix/zabbix[,6.0.39rc1)[7.0.0alpha1,7.0.10rc1)[7.2.0alpha1,7.4.0alpha1)	Unmanaged (C/C++)	1 Jun 2025
L Timing Attack	zabbix/zabbix[,5.0.46rc1)[6.0.0,6.0.38rc1)[7.0.0,7.0.9rc1)[7.2.0,7.2.3rc1)	Unmanaged (C/C++)	1 Jun 2025
H SQL Injection	zabbix/zabbix[,7.0.8rc2)[7.2.0alpha1,7.2.2rc1)[7.2.2,7.4.0alpha1)	Unmanaged (C/C++)	1 Jun 2025
C Malicious Package	motion-exts*	npm	30 May 2025
C Malicious Package	express-authgen*	npm	30 May 2025
C Malicious Package	sforce*	npm	30 May 2025
C Malicious Package	muto-kaiju-log*	npm	30 May 2025
C Malicious Package	fider*	npm	30 May 2025

APPLICATION

OPERATING SYSTEM