CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

561 matches found

OSV•added 2026/07/03 8:16 a.m.•3 views

UBUNTU-CVE-2026-8804

Puppet resourceapi shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transaction state cache. Affected versions of th...

6.7CVSS6.1AI score0.00082EPSS

Exploits0References3

Debian CVE•added 2026/07/03 7:40 a.m.•8 views

CVE-2026-8804

6.7CVSS5.9AI score0.00082EPSS

Exploits0

CVE•added 2026/07/03 7:40 a.m.•22 views

CVE-2026-8804

The CVE concerns Puppet’s resource_api (bundled with Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x). A vulnerability exists where the sensitive flag on parameters defined via the resource-api is not preserved, causing values such as passwords to be stored in cleartext in the agent’s l...

6.7CVSS5.9AI score0.00082EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 11:29 a.m.•8 views

CVE-2021-27026

A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged...

4.4CVSS6.7AI score0.00238EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:58 a.m.•8 views

CVE-2020-7944

In Continuous Delivery for Puppet Enterprise CD4PE before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report...

7.7CVSS7AI score0.00859EPSS

Exploits0References1

Veracode•added 2025/12/13 5:3 a.m.•10 views

Code Injection

org.jenkins-ci.plugins.workflow, puppet-enterprise-pipeline is vulnerable to code injection The vulnerability is due to unsafe values specified in the custom Script Security whitelist, which allows an attacker with the ability to execute Script Security-protected scripts to execute arbitrary code...

9.9CVSS7.7AI score0.0192EPSS

Exploits0References3Affected Software1