22657 matches found
CVE-2026-73667 OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -...
CVE-2026-73667
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -...
GHSA-HF6X-8P5F-CGMF vulnerabilities
Vulnerabilities for packages: jbang, camunda-zeebe, nuxeo, traccar, airbyte-server, elasticsearch-fips, geoserver, flyway, apache-hop-fips, apicurio-registry, opensearch-fips, apache-hop, cassandra-reaper, wso2is, airbyte-platform-fips, elasticsearch, airbyte-platform, floci-az, reposilite,...
SUSE CVE-2026-5917
libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacte...
JLSEC-2026-1304
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of...
JLSEC-2026-1316
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8...
New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure
Afghan telecom providers and South Asian critical infrastructure organizations have emerged as the target of a new ongoing campaign that delivers a previously undocumented backdoor called PATCHCORD. According to Acronis Threat Research Unit TRU, the backdoor is a compiled C/C++ implant delivered ...
CVE-2026-53802
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a...
OESA-2026-3387 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
OESA-2026-3386 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
OESA-2026-3385 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
OESA-2026-3384 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...
MINI-9FPH-3QG3-8HRR
Bulletin has no description...
MINI-79HR-WHJ5-MWGR
Bulletin has no description...
MINI-6WP6-V2RR-JQHM
Bulletin has no description...
MINI-R7GX-95FW-R5CM
Bulletin has no description...
MINI-QCV7-XF5C-P7PQ
Bulletin has no description...
[SECURITY] Fedora 44 Update: apr-util-1.6.5-1.fc44
The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...
CVE-2026-73154
GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow...
Botan C++ Crypto Algorithms Library 3.13.0
Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and CRLs, and PKCS 10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to...