CVE-2026-14163

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...

CVE-2026-14163

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...

CVE-2026-14163

Octopus Server's deployment variable snapshot can expose sensitive variables in clear-text under certain circumstances, leading to confidentiality impact (CVSS 7.1 HIGH, network-accessible, low privileges required). Affected component is the deployment variable snapshot; no specific version range...

CVE-2026-14163: Insertion of Sensitive Information into Log File

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...

PT-2026-78897

Name of the Vulnerable Software and Affected Versions Octopus Server affected versions not specified Description Under certain circumstances, sensitive variables may be printed in clear-text within the deployment variable snapshot. Recommendations At the moment, there is no information about a...

PT-2026-79035

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...

PT-2026-80279

We don't enforce any limits for the encoded variable lengths that are used for fields. As the remote peer controls these it's easy for the remote peer to have us buffer data forever and so ultimately OOM...

PT-2026-80783

We don't enforce any limits for the encoded variable lengths that are used for fields. As the remote peer controls these it's easy for the remote peer to have us buffer data forever and so ultimately OOM...

Assignment to Variable without Use

Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...

Assignment to Variable without Use

Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...

Assignment to Variable without Use

Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...

CVE-2026-76919 Use of Uninitialized Variable in Wireshark

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76919

CVE-2026-76919 affects the ESS protocol dissector in Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 , causing a crash that leads to denial of service . The root cause is related to errors during initialization of the dissector, as noted by FSTEC. The NVD assigns a 7.5 HIGH CVSS score (network ve...

CVE-2026-76919 Use of Uninitialized Variable in Wireshark

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76919 Use of Uninitialized Variable in Wireshark

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

GHSA-FJ27-X67R-V4G5 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-74265

A flaw was found in the mana network driver of the Linux kernel. When creating a General DMA GDMA queue, the queue-id may not be properly initialized. If the queue creation fails before a valid ID is assigned, a subsequent cleanup operation can incorrectly use a zero ID, potentially corrupting th...

CVE-2026-16869

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are affected by a local privilege escalation flaw caused by improperly scrubbed environment variables, allowing low-privilege local attackers to execute arbitrary code with HIGH confidentiality, integrity, and availability impact (CVSS 7.8). No exploitation de...

CVE-2026-16869 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables...

Security update for podman

This update for podman fixes the following issues: CVE-2026-55686: specially crafted image where the WORKDIR path contains a symlink allows for directory creation and ownership modification on the host filesystem bsc1268579. CVE-2026-57231: specially crafted image can trick podman run into leakin...