51707 matches found
GHSA-CHX6-HX7R-MCP5 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-4X4J-2G7C-83W6 vulnerabilities
Vulnerabilities for packages: open-webui, superset, mlflow...
CVE-2026-55798 vulnerabilities
Vulnerabilities for packages: open-webui, superset, mlflow...
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-JJJ6-MW9F-P565 vulnerabilities
Vulnerabilities for packages: open-webui, superset, mlflow...
GHSA-9HW9-CH79-4VH6 vulnerabilities
Vulnerabilities for packages: open-webui, superset, mlflow...
GHSA-659M-PX2C-25WJ vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
GHSA-337J-9HXR-RHXG vulnerabilities
Vulnerabilities for packages: vitess, librechat, keycloak...
GHSA-MQ64-J8F9-9GCJ vulnerabilities
Vulnerabilities for packages: apache-activemq, camunda, apache-nifi-registry, kafbat-ui-fips, apache-activemq-fips, camunda-zeebe, kafbat-ui...
CVE-2026-18141
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
CVE-2026-18141
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
EUVD-2026-51556
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
CVE-2026-18141
The CVE-2026-18141 entry concerns aap-gateway in Ansible Automation Platform’s Event-Driven Ansible (EDA). Affected component: aap-gateway. Vulnerability: an unauthenticated remote attacker can bypass mutual TLS on event streams by manipulating the event stream URL and forging the HTTP Subject he...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.70 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.67 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.67 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
CVE-2026-17561 Unauthenticated RCE in Innotim Software's Logsign SIEM
Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115...
CVE-2026-62323
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, ViewerSessionValidation uses only the session-id prefix of a WOPI access token and does not enforce the requested viewer action, allowing a malicious or compromised WOPI viewer with a view session to forge the token...
GHSA-CP45-6Q6C-3772 vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9...