12301 matches found
CVE-2026-67208
CVE-2026-67208 – Juggle 1.6.0 exposes an unauthenticated remote code execution via the exposed H2 database web console. An attacker can reach the unprotected /h2-console endpoint, authenticate with default shipped credentials, and use the H2 CREATE ALIAS Runtime.exec() technique to execute arbitr...
CVE-2026-67208 Juggle 1.6.0 Unauthenticated RCE via Exposed H2 Console
Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...
SUSE CVE-2026-39386
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain full administrative control of the entire Neko instance member management, room settings, broadcast control, session...
SUSE CVE-2026-40893
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly FileName, so System:FileName slips right through and ExifTool happily renames the file. This allows remote attackers to move, rename, and change permissions for arbitrary files...
SUSE CVE-2026-44848
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, The Docker plugin management endpoints /plugins/ were not registered...
SUSE CVE-2026-47125
Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/id/templates/variables endpoint, which writes the system-wide .env.global file used for variable substitution in every project's compose file, is missing an admin...
SUSE CVE-2026-47179
Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.4, ProjectService.GetProjectFileContent returns the contents of any Docker Compose include directive declared in a project's compose file before any path-traversal validation runs. Because...
SUSE CVE-2026-55229
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.34.0, Gotenberg's /forms/libreoffice/convert endpoint allows a specially crafted document to cause LibreOffice to automatically retrieve external HTTPS resources and local file resources during document conversion, enabling bli...
CLEANSTART-2026-DZ08128 Security fixes in docker 18.09.7-r0
Package docker version 18.09.7-r0 fixes 1 vulnerabilities: CVE-2018-15664...
CLEANSTART-2026-NH05204 Security fixes in docker-fips 19.03.11-r0
Package docker-fips version 19.03.11-r0 fixes 1 vulnerabilities: CVE-2020-13401...
CLEANSTART-2026-NQ19078 Security fixes in docker-fips 18.09.7-r0
Package docker-fips version 18.09.7-r0 fixes 1 vulnerabilities: CVE-2018-15664...
CLEANSTART-2026-KS78013 Security fixes in docker 19.03.14-r0
Package docker version 19.03.14-r0 fixes 1 vulnerabilities: CVE-2020-15257...
CLEANSTART-2026-RZ50017 Security fixes in docker 20.10.3-r0
Package docker version 20.10.3-r0 fixes 2 vulnerabilities: CVE-2021-21285, CVE-2021-21284...
CLEANSTART-2026-DI23890 Security fixes in docker-fips 18.09.8-r0
Package docker-fips version 18.09.8-r0 fixes 1 vulnerabilities: CVE-2019-13509...
CLEANSTART-2026-MJ08411 Security fixes in docker 19.03.1-r0
Package docker version 19.03.1-r0 fixes 1 vulnerabilities: CVE-2019-14271...
CLEANSTART-2026-MI17350 Security fixes in docker-fips 20.10.9-r0
Package docker-fips version 20.10.9-r0 fixes 3 vulnerabilities: CVE-2021-41089, CVE-2021-41091, CVE-2021-41092...
CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5
Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...
CLEANSTART-2026-QK79485 Security fixes in docker 25.0.2-r0
Package docker version 25.0.2-r0 fixes 5 vulnerabilities: CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-23650, CVE-2024-24557...