58985 matches found
CVE-2026-73476 External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
CVE-2026-73476
The Drupal External Authentication module, versions 0.0.0 through 2.0.13 , is vulnerable to Privilege Escalation due to improper handling of case sensitivity. The root cause is the module's failure to ensure exact matching of externally supplied identity values when storing and retrieving authent...
CVE-2026-73476 External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
EUVD-2026-69990
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
CVE-2026-73476 External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
firmwalker
firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...
CVE-2026-73476: Improper Handling of Case Sensitivity
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
CVE-2026-84654: External Control of Assumed-Immutable Web Parameter
In Stapler 2107.v8dfcbe8ed317 and earlier, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, form data binding allows setting public static fields of the bound configuration object, allowing attackers who can submit configuration forms to modify publi...
FreeBSD : expat2 -- Out-of-bounds Read (11ab3b16-a65d-11f1-a49c-00a0980083d7)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 11ab3b16-a65d-11f1-a49c-00a0980083d7 advisory. https://github.com/libexpat/libexpat/pull/1331 reports: Expat through 2.8.3 contains an out-of-bounds...
SUSE CVE-2026-17615
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...
CLEANSTART-2026-DR03869 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r1
Package kubernetes-csi-external-provisioner-fips version 6.2.1-r1 fixes 29 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...
CLEANSTART-2026-OR64895 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r2
Package kubernetes-csi-external-provisioner-fips version 6.2.1-r2 fixes 21 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...
CLEANSTART-2026-HV38878 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r3
Package kubernetes-csi-external-provisioner-fips version 6.2.1-r3 fixes 27 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...
CLEANSTART-2026-ZD57800 Security fixes in external-secrets-operator 2.9.0-r0
Package external-secrets-operator version 2.9.0-r0 fixes 1 vulnerabilities: ghsa-gcjh-h69q-9w9g...
ROS-20260901-73-0032
The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260901-73-0030
The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260901-73-0033
The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2026-89977
Package external-secrets-operator version 2.9.0-r0 fixes 1 vulnerabilities: ghsa-gcjh-h69q-9w9g...
CVE-2026-19593: External Control of System or Configuration Setting
OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause G...
