256622 matches found
CVE-2026-73682
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub...
CVE-2026-73682 Semaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handling
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
CVE-2026-73682 Semaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handling
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
CVE-2026-73682
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
CVE-2026-19629
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...
CVE-2026-19629
CVE-2026-19629 describes a privilege-escalation in Tenable Security Center where a user with the Security Manager role and “manage user” permission on a single group can modify users in other groups, bypassing cross-group access controls. The issue affects the Security Center component and is cla...
CVE-2026-19629 Privilege Escalation
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...
pdtm v0.1.4
ProjectDiscovery's Open Source Tool Manager Features • Installation • Usage • Running pdtm • Join Discord pdtm is a simple and easy-to-use golang based tool for managing open source projects from ProjectDiscovery. Installation pdtm requires go1.24.3 to install successfully. Run the following...
CVE-2026-73627
A flaw was found in JupyterLab. An authenticated user can bypass administrator lock rules in the plugin manager by making direct requests to the /lab/api/plugins endpoint. This allows them to enable or disable plugins that were locked, including child plugins and those locked via the 'lock all'...
CVE-2026-73416
A flaw was found in jupyterlab. The PyPI Python Package Index extension manager uses a custom normalization process for package names that is weaker than the official PyPI canonicalization. This allows an authenticated user to bypass blocklist restrictions by using an alternative spelling of a...
MAL-2026-14093 Malicious code in rtms-manager-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rtms-manager-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GO-2022-0197 vulnerabilities
Vulnerabilities for packages: hey...
GO-2023-2095 vulnerabilities
Vulnerabilities for packages: configmap-reload-fips, smarter-device-manager-fips, metrics-server, kind, kubeflow-katib...
GO-2026-5666 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, gitlab-operator, zarf, cert-manager-cmctl-fips, helm-diff, flux-fips, flux, helm-diff-fips, kuma, helm-push, rancher-fleet, cilium-cli, flux-source-controller, gitlab-operator-fips, kots, rancher-fleet-fips, flux-source-controller-fips, zarf-fips...
GO-2026-5363 vulnerabilities
Vulnerabilities for packages: istio, cert-manager-istio-csr, cert-manager-istio-csr-fips...
GO-2026-5289 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-istio-csr-fips...
GO-2026-5566 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, gitlab-operator, zarf, cert-manager-cmctl-fips, helm-diff, flux-fips, flux, helm-diff-fips, kuma, helm-push, rancher-fleet, cilium-cli, flux-source-controller, gitlab-operator-fips, kots, rancher-fleet-fips, flux-source-controller-fips, zarf-fips...
GO-2025-4116 vulnerabilities
Vulnerabilities for packages: etcd-fips, vault, rke2-runtime-fips, cert-manager-fips, consul-k8s, gitlab-rails-ce-fips, k3s, backup-restore-operator, terraform, falco-no-driver, gitlab-rails-ce, kube-conformance, etcd...