756 matches found
EUVD-2026-42708
An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...
CVE-2026-57021
An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...
CVE-2026-57021
An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...
CVE-2026-57021
The CVE-2026-57021 entry describes an Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) component of Juniper Networks Junos OS on SRX Series. A network-based, unauthenticated attacker can trigger the flaw by sending specially formatted requests when remote-access VPN with pre-log...
CVE-2026-57021 Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash
An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...
PT-2026-56975
Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions prior to 23.2R2-S7 Junos OS on SRX Series versions prior to 23.4R2-S8 Junos OS on SRX Series versions prior to 24.2R2-S4 Junos OS on SRX Series versions prior to 24.4R2-S4 Junos OS on SRX Series versions prior t...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: argo-workflows, google-guest-agent-manager, kaf, rancher, kubernetes, drone, istio, argo-workflows-fips, crossplane-fips, cert-manager, knative-serving, prometheus-operator, crossplane-provider-azure-orbital, flux-notification-controller, external-dns, age,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: argo-workflows, google-guest-agent-manager, kaf, rancher, kubernetes, drone, istio, argo-workflows-fips, crossplane-fips, cert-manager, knative-serving, prometheus-operator, crossplane-provider-azure-orbital, flux-notification-controller, external-dns,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: argo-workflows, kaf, rancher, kubernetes, drone, istio, argo-workflows-fips, knative-serving, cert-manager, prometheus-operator, external-dns, k9s-fips, omnictl-multiarch, kubevela-fips, kubernetes-dashboard, kubescape-server, kubescape-server-fips, k9s, skaffold,...
GO-2026-5527 Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows
Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS gatekeeper.go in github.com/argoproj/argo-workflows...
CVE-2026-42890
Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...
CVE-2026-42890
CVE-2026-42890 affects the macOS desktop application Actual (version 25.x, Electron 39.2.7). The ELECTRON_RUN_AS_NODE fuse was not disabled, allowing a local attacker who can place a file on disk or influence command-line arguments to invoke Actual.app with ELECTRON_RUN_AS_NODE=1. This converts t...
CVE-2026-42890 actual Allows Electron to Run As Node
Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...
EUVD-2026-36547
Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...
PT-2026-47558
Summary A electron run as node vulnerability was identified in actual macOS application, version 25.x Electron 39.2.7. Vulnerability Type: Electron Run As Node Description ELECTRON RUN AS NODE fuse enabled Electron 39.2.7 — app can be converted to Node.js REPL for arbitrary code execution Impact ...
PT-2026-47599
Name of the Vulnerable Software and Affected Versions Actual versions prior to 26.5.0 Description In the macOS desktop application, the ELECTRON RUN AS NODE fuse is not disabled. This allows an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app...
CVE-2026-28954
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A maliciously crafted disk image may bypass Gatekeeper checks...
gatekeeper_wan_poc_server
This is the...
GHSA-FQW6-GF59-QR4W vulnerabilities
Vulnerabilities for packages: helm-operator, dagger, docker, eksctl, helm-set-status, k9s, kube-arangodb, opa, rancher-agent, scorecard, zarf, consul-k8s, ctop, datadog-agent, k8ssandra-client, helm, teleport, syft, envoy-gateway, spegel, opa-envoy, newrelic-infrastructure-agent, k3s, kubescape,...
CVE-2026-46680 vulnerabilities
Vulnerabilities for packages: helm-operator, dagger, docker, eksctl, helm-set-status, k9s, kube-arangodb, opa, rancher-agent, scorecard, zarf, consul-k8s, ctop, datadog-agent, k8ssandra-client, helm, teleport, syft, envoy-gateway, spegel, opa-envoy, newrelic-infrastructure-agent, k3s, kubescape,...