271706 matches found
CVE-2026-12522
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
EUVD-2026-63087
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
CVE-2026-76139 Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
CVE-2026-76139
The acm-operator-bundle build process executes an unpinned script from stolostrum/release@master using full build credentials (GitHub tokens, registry passwords) without verifying authenticity or integrity. A remote attacker controlling that script could inject malicious code, gaining unauthorize...
CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-53545
Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. Prior to 2.3.2 , the DELETE /ssh/tunnel/disconnect/:tunnelName endpoint in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pki...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: logstash, zipkin, thingsboard, traccar-fips, conductor, traccar, conductor-fips, druid, nuxeo, logstash-fips, cassandra-reaper...
CVE-2026-69220 vulnerabilities
Vulnerabilities for packages: logstash, zipkin, thingsboard, traccar-fips, conductor, traccar, conductor-fips, druid, nuxeo, logstash-fips, cassandra-reaper...
GHSA-5M9F-RPHJ-C435 vulnerabilities
Vulnerabilities for packages: logstash, zipkin, thingsboard, traccar-fips, conductor, traccar, conductor-fips, druid, nuxeo, logstash-fips, cassandra-reaper...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: logstash, zipkin, thingsboard, traccar-fips, conductor, traccar, conductor-fips, druid, nuxeo, logstash-fips, cassandra-reaper...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: logstash, zipkin, thingsboard, conductor, conductor-fips, druid, nuxeo, logstash-fips, cassandra-reaper...
CVE-2026-63337 vulnerabilities
Vulnerabilities for packages: logstash, zipkin, thingsboard, traccar-fips, conductor, traccar, conductor-fips, druid, nuxeo, logstash-fips, cassandra-reaper...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: logstash, druid, zipkin, thingsboard, cassandra-reaper...
GHSA-68MJ-5WR7-6FGG vulnerabilities
Vulnerabilities for packages: logstash, druid, zipkin, thingsboard, cassandra-reaper...
GHSA-QX7J-JV8M-FPPR vulnerabilities
Vulnerabilities for packages: logstash, druid, zipkin, thingsboard, cassandra-reaper...
GHSA-5CFW-78WC-WVJQ vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2026-38752 vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-63722
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...