267845 matches found
CVE-2026-74250
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...
CVE-2026-53708
creationtimestamp| type| source ---|---|--- 2026-08-14 20:35:03+00:00| published-proof-of-concept| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-9hgc-g3w5-67cm...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-node-driver-registrar-fips, policy-controller-fips, crossplane-provider-aws-cognitoidentity-fips, secretgen-controller-fips, zarf, crossplane-provider-aws-dynamodb-fips, flux-source-watcher, kserve-localmodelnode-agent-fips, harbor-scanner-trivy,...
GHSA-5FPJ-28RV-84R7 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
Summary Budibase automation steps outgoing webhook, Zapier, n8n, Slack, Discord, Make.com make server-side HTTP requests to user-provided URLs using node-fetch directly, completely bypassing the IP blacklist protection that exists in the REST API integration. Additionally, the REST API blacklist...
DoS (Denial of Service) node-tar dependency tar Dependency in Jira Software Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector o...
DoS (Denial of Service) tar Dependency in Jira Service Management Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVS...
DoS (Denial of Service) tar Dependency in Confluence Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.5, 9.5.1, 10.1.2, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...
AZL-95985 CVE-2026-47766 affecting package crun 1.24-6
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
EUVD-2026-58714
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from functions in the drivers/dibs/dibsloopback.c file, specifically dibsloattachdmb, dibslodetachdmb, and dibslounregisterdmb. These functions improperly hold locks after finding a dmbnode, resulting in t...
CVE-2026-73566
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could provide a specially crafted tar archive with a long-path header. When processing this archive with a non-empty member-selection list, an uncontrolled recursion in the filesFilter function can lea...
Malicious code in @zalastax/nolb-node-ss (npm)
The package @zalastax/nolb-node-ss was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-node-u (npm)
The package @zalastax/nolb-node-u was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-node-v (npm)
The package @zalastax/nolb-node-v was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-node-sw (npm)
The package @zalastax/nolb-node-sw was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-node-sv (npm)
The package @zalastax/nolb-node-sv was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-node-sy (npm)
The package @zalastax/nolb-node-sy was found to contain malicious code. --- Credit: OpenSSF source...