446 matches found
CVE-2026-3236: Incorrect Authorization
In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key having a lifetime exceeding the original API key used to mint the access token...
Octopus Server security vulnerabilities
Octopus Server is a continuous delivery deployment automation and release management tool developed by the Australian company Octopus. There is a security vulnerability in Octopus Server, which allows for the creation of new API keys from existing access tokens. This vulnerability may cause the...
PT-2026-23446
Name of the Vulnerable Software and Affected Versions Octopus Server affected versions not specified Description An issue existed in Octopus Server where a new API key could be created from an existing access token. This allowed the new API key to have a longer lifetime than the original access...
CVE-2021-31820
In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI...
CVE-2021-31817
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext...
CVE-2021-31818
Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables...
CVE-2021-31821
When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image...
EUVD-2021-18694
Malware in sbrugna...
EUVD-2021-18696
Malware in sbrugna...
EUVD-2021-17116
Malware in sbrugna...
EUVD-2021-18695
Malware in sbrugna...
EUVD-2021-18693
Malware in sbrugna...
EUVD-2021-18692
Malware in sbrugna...
EUVD-2021-13355
Malware in sbrugna...
EUVD-2019-8724
Malware in sbrugna...
EUVD-2022-35024
Malicious code in bioql PyPI...
EUVD-2024-44565
Malicious code in bioql PyPI...
EUVD-2024-44564
Malicious code in bioql PyPI...