1047 matches found
EUVD-2026-106764
Vulnerability in Oracle GoldenGate component: Admin Client Executable. Supported versions that are affected are 23.4-23.26.2.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerabili...
CVE-2026-91530
Vulnerability in Oracle GoldenGate component: Admin Client Executable. Supported versions that are affected are 23.4-23.26.2.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerabili...
CVE-2026-91530
A vulnerability exists in the Oracle GoldenGate Admin Client Executable affecting versions 23.4-23.26.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise Oracle GoldenGate. Successful exploitation may result in unauthorized acce...
PT-2026-66597
Name of the Vulnerable Software and Affected Versions Capsule versions 0.13.0 through 0.13.7 Description TenantResource RawItems and Generators in internal/controllers/resources/collect.go, specifically within the handleRawItem and handleGeneratorItem functions, fail to apply the...
com.consol.citrus:citrus-http (2.2), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +78 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.0.7.release)
org.springframework:spring-webmvc MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.consol.citrus:citrus-http 2.2 - de.codecentric:jbehave-admin-server =0.0.1, =1.0....
com.consol.citrus:citrus-http (2.2), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +78 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.0.7.release)
org.springframework:spring-webmvc MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.consol.citrus:citrus-http 2.2 - de.codecentric:jbehave-admin-server =0.0.1, =1.0....
com.consol.citrus:citrus-http (2.2), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +78 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.0.7.release)
org.springframework:spring-webmvc MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.consol.citrus:citrus-http 2.2 - de.codecentric:jbehave-admin-server =0.0.1, =1.0....
com.consol.citrus:citrus-http (2.2), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +78 more potentially affected by CVE-2026-22745 via org.springframework:spring-webmvc (4.0.7.release)
org.springframework:spring-webmvc MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.consol.citrus:citrus-http 2.2 - de.codecentric:jbehave-admin-server =0.0.1, =1.0....
Information Exposure
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Information Exposure via the connect process. An attacker can obtain sensitive host filesystem paths and deployment metadata by making authenticated requests as a non-admin client...
de.codecentric:spring-boot-admin-example (1.0.2), de.codecentric:spring-boot-admin-server (1.0.2) +7 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.6.release)
org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - de.codecentric:spring-boot-admin-example 1.0....
@backstage-community/plugin-catalog-backend-module-keycloak (>=3.4.0, <=3.17.2), @dedel.alex/keycloak-admin-client-cjs (>=26.0.4, <=26.1.4) +7 more potentially affected by CVE-2026-2366 via @keycloak/keycloak-admin-client (>=26.0.0, <=26.5.5)
@keycloak/keycloak-admin-client NPM version =26.0.0, =3.4.0, =26.0.4, =26.0.0, =26.0.0, =26.0.0, =2.1.1, =0.0.7, =0.1.1 Source cves: CVE-2026-2366 Source advisory: GHSA-R8JR-WG88-FQ5C...
@backstage-community/plugin-catalog-backend-module-keycloak (>=3.4.0, <=3.17.2), @dedel.alex/keycloak-admin-client-cjs (>=26.0.4, <=26.1.4) +7 more potentially affected by CVE-2026-2366 via @keycloak/keycloak-admin-client (>=26.0.0, <=26.5.5)
@keycloak/keycloak-admin-client NPM version =26.0.0, =3.4.0, =26.0.4, =26.0.0, =26.0.0, =26.0.0, =2.1.1, =0.0.7, =0.1.1 Source cves: CVE-2026-2366 Source advisory: OSV:GHSA-R8JR-WG88-FQ5C...
CVE-2025-12509
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
EUVD-2025-37364
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
CVE-2025-12509
On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...
Malicious code in mongodb-stitch-core-admin-client (npm)
The package mongodb-stitch-core-admin-client was found to contain malicious code...
Incorrect Default Permissions
Overview Affected versions of this package are vulnerable to Incorrect Default Permissions via the Admin.Client.UpdateClientConfig artifact. An attacker can gain elevated privileges and execute arbitrary commands by exploiting insufficient permission checks when collecting artifacts from endpoint...
Incorrect Default Permissions
Overview Affected versions of this package are vulnerable to Incorrect Default Permissions via the Admin.Client.UpdateClientConfig artifact. An attacker can gain elevated privileges and execute arbitrary commands by exploiting insufficient permission checks when collecting artifacts from endpoint...
Incorrect Default Permissions
Overview Affected versions of this package are vulnerable to Incorrect Default Permissions via the Admin.Client.UpdateClientConfig artifact. An attacker can gain elevated privileges and execute arbitrary commands by exploiting insufficient permission checks when collecting artifacts from endpoint...
Velociraptor security vulnerabilities
Velociraptor is a Velocidex open source tool for collecting host-based state information using Velociraptor Query Language VQL queries. A security vulnerability exists in Velociraptor that stems from the failure of the Admin.Client.UpdateClientConfig artifact to enforce additional privileges, whi...