509 matches found
CVE-2026-54284 vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.1-fips, openstack-glance-2025.2, airflow, apache-beam-python-3.14-sdk, openstack-nova-2025.1, openstack-nova-2025.2, openstack-keystone-2025.2, openstack-glance-2025.1,...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.1-fips, openstack-glance-2025.2, airflow, apache-beam-python-3.14-sdk, openstack-nova-2025.1, openstack-nova-2025.2, openstack-keystone-2025.2, openstack-glance-2025.1,...
GHSA-PWGV-4X5Q-6M9F vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.1-fips, openstack-glance-2025.2, airflow, apache-beam-python-3.14-sdk, openstack-nova-2025.1, openstack-nova-2025.2, openstack-keystone-2025.2, openstack-glance-2025.1,...
GHSA-3496-9G83-7V6X vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.1-fips, openstack-glance-2025.2, airflow, apache-beam-python-3.14-sdk, openstack-nova-2025.1, openstack-nova-2025.2, openstack-keystone-2025.2, openstack-glance-2025.1,...
CVE-2026-59894 vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.1-fips, openstack-glance-2025.2, airflow, apache-beam-python-3.14-sdk, openstack-nova-2025.1, openstack-nova-2025.2, openstack-keystone-2025.2, openstack-glance-2025.1,...
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.1-fips, openstack-glance-2025.2, airflow, apache-beam-python-3.14-sdk, openstack-nova-2025.1, openstack-nova-2025.2, openstack-keystone-2025.2, openstack-glance-2025.1,...
GHSA-GQGW-JGHV-MXWX vulnerabilities
Vulnerabilities for packages: netbox-fips...
CVE-2026-9318 vulnerabilities
Vulnerabilities for packages: netbox-fips...
CVE-2026-69117
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
EUVD-2026-56860
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-69117
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-69117 NetBox 4.5.8 ORM Injection via WritableNestedSerializer
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-69117 NetBox 4.5.8 ORM Injection via WritableNestedSerializer
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-69117
CVE-2026-69117 : NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH re...
PT-2026-70842
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...
CVE-2026-17569
Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint. This issue affects : Devolutions Server 2026.2.4.0 through 2026.2.12.0 Devolutions Server...
CVE-2026-17569
Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint. This issue affects : Devolutions Server 2026.2.4.0 through 2026.2.12.0 Devolutions Server...
CVE-2026-17569
CVE-2026-17569: Improper access control in the NetBox synchronizer of Devolutions Server allows an authenticated user with view-only access on an entry to retrieve a stored API token via the partial connection endpoint. Affected products/versions include Devolutions Server 2026.2.4.0 through 2026...
EUVD-2026-49379
Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint. This issue affects : Devolutions Server 2026.2.4.0 through 2026.2.12.0 Devolutions Server...
CVE-2026-17569
Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint. This issue affects : Devolutions Server 2026.2.4.0 through 2026.2.12.0 Devolutions Server...