CVE-2026-6267 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GitLab 10.1.0 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-6267)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an...

CVE-2026-6267

creationtimestamp| type| source ---|---|--- 2026-07-29 20:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssq4z4eg24 2026-07-29 21:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrssz3rn6z23 2026-07-30 03:11:06+00:00| seen|...

CVE-2026-6267 Insertion of Sensitive Information Into Sent Data in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Developer role to access unauthorized information due to insufficient access...

Linux Distros Unpatched Vulnerability : CVE-2017-6267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite...

CVE-2025-6267

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /adpweb/a/base/barcodeDetail/. The manipulation of the argument barcodeNo/barcode/itemNo leads to sql injection...

CVE-2025-6267

creationtimestamp| type| source ---|---|--- 2025-06-19 14:40:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18864 2025-06-19 17:38:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lry2vrun242r...

CVE-2025-6267

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /adpweb/a/base/barcodeDetail/. The manipulation of the argument barcodeNo/barcode/itemNo leads to sql injection...

CVE-2025-6267

The CVE-2025-6267 entry concerns zhilink ADP Application Developer Platform (version 1.0.0). A SQL injection vulnerability arises from improper handling of the parameters barcodeNo, barcode, and itemNo in the file /adpweb/a/base/barcodeDetail/. This could allow remote attacker-controlled input to...

Linux Distros Unpatched Vulnerability : CVE-2023-6267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being...

RHEL 9 : kernel (RHSA-2024:6267)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6267 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: kprobes/x86: Use...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for February 2023.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 23.0.2-IF002. Vulnerability Details CVEID:CVE-2023-6267 DESCRIPTION: Quarkus could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization in the json payload when...

ai.pipestream.module:module-chunker (=0.1.1), ai.pipestream.module:module-echo (=0.1.1) +710 more potentially affected by CVE-2023-6267 via io.quarkus.resteasy.reactive:resteasy-reactive (>=3.0.0.Final <=3.2.8.Final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version =3.0.0.Final, =0.0.2, =0.1.1, =0.2.0, =0.2.0, =0.1.1, =0.1.7, =1.21.0, =1.28.0 and more Source cves: CVE-2023-6267 Source advisory: OSV:GHSA-8J3X-W35R-RW4R...

CVE-2023-6267

creationtimestamp| type| source ---|---|--- 2024-01-25 19:31:51+00:00| seen| https://t.me/ctinow/173729 2024-01-25 20:26:08+00:00| seen| https://t.me/ctinow/173773 2024-02-17 23:21:42+00:00| seen| https://t.me/ctinow/187071...

CVE-2023-6267

CVE-2023-6267 affects Quarkus: a deserialization flaw in the json payload when REST resources are secured with annotation-based security can allow remote code execution. Deserialization occurs before security checks, unlike configuration-based security. Affected records corroborate an unsafe-dese...

CVE-2023-6267 Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.

A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed deserialized prior to the security constraints being evaluated and applied. This does not happen with configuration based security...

CVE-2023-6267 Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.

A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed deserialized prior to the security constraints being evaluated and applied. This does not happen with configuration based security...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.2.9.SP1 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Rocky Linux 8 : squid:4 (RLSA-2023:6267)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:6267 advisory. - SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past...

Oracle Linux 8 : squid:4 (ELSA-2023-6267)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6267 advisory. - Improve HTTP chunked encoding compliance CVE-2023-46846 Tenable has extracted the preceding description block directly from the Oracle Linux security...