8629 matches found
BIT-DISTRIBUTION-2026-35172 Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared dige...
CVE-2026-70782: Improper Access Control
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor...
PT-2026-77777
Name of the Vulnerable Software and Affected Versions Oracle Labor Distribution versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...
PT-2026-79850
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2//manifests/ endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has...
PT-2026-79849
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared dige...
PT-2026-80338
In github.com/distribution/distribution and github.com/distribution/distribution/v3 before 3.1.0, when storage.cache.blobdescriptor is configured with redis and storage.delete.enabled is true, deleting a blob in one repository clears the shared digest descriptor in Redis but leaves stale...
ROS-20260817-73-0023
The vulnerabilities of.NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
ROS-20260817-73-0030
The vulnerability of the .NET software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
ROS-20260817-73-0027
The vulnerabilities of.NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
ROS-20260817-73-0012
The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ROS-20260817-73-0022
The vulnerabilities of.NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
DEBIAN-CVE-2026-72030
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Reject an invalid concurrent positioning ranges count atadevconfigcpr takes the number of range descriptors from buf0 of the concurrent positioning ranges log up to 255, which the device reports independently of...
Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Threat actors are acquiring expired domains to inherit their website traffic and reputation with an aim to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain...
GO-2025-4009 vulnerabilities
Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, task, knative-eventing-fips, nvidia-nsight-compute-12.9, certificate-transparency, neuvector-dbgen-fips, sonobuoy-fips, pvc-autoresizer, sops, kepler,...
GO-2025-4013 vulnerabilities
Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, task, knative-eventing-fips, nvidia-nsight-compute-12.9, certificate-transparency, neuvector-dbgen-fips, sonobuoy-fips, pvc-autoresizer, sops, kepler,...
GO-2025-3749 vulnerabilities
Vulnerabilities for packages: gpu-operator-fips, cluster-proportional-autoscaler-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, witness, nats-server-fips, sftpgo-plugin-eventsearch, nvidia-nsight-compute-12.9, percona-server-mongodb-operator-fips, gatus, neuvector-dbgen-fips,...
GO-2025-3553 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-pubsub, sigstore-scaffolding, cloud-provider-azure, rekor, azuredisk-csi, kubernetes-dashboard-auth-fips, gomplate-fips, kyverno-policy-reporter-ui, argo-workflows-fips, kots, timestamp-authority, minio, aactl, pulumi-kubernetes-operator,...
GO-2024-3321 vulnerabilities
Vulnerabilities for packages: gomplate-fips, doppler-kubernetes-operator, kiali, task, kargo, sftpgo-plugin-eventsearch, certificate-transparency, rancher-fleet, crossplane-provider-sql, caddy, sops, eksctl, helm-operator-fips, buf, wolfictl, tigera-operator, flux-source-controller-fips,...
GO-2024-3333 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler-fips, gomplate-fips, hubble-ui-backend-fips, doppler-kubernetes-operator, kiali, task, kargo, sftpgo-plugin-eventsearch, certificate-transparency, rancher-fleet, crossplane-provider-sql, caddy, sops, eksctl, rabbitmq-cluster-operator,...