274219 matches found
EUVD-2026-63087
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
CVE-2026-76139 Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
CVE-2026-76139
The acm-operator-bundle build process executes an unpinned script from stolostrum/release@master using full build credentials (GitHub tokens, registry passwords) without verifying authenticity or integrity. A remote attacker controlling that script could inject malicious code, gaining unauthorize...
CVE-2026-75569 Mce-operator-bundle: mce-operator-bundle: bundle-generation business logic fetched from mutable stolostron/release@master
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-75569 Mce-operator-bundle: mce-operator-bundle: bundle-generation business logic fetched from mutable stolostron/release@master
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-53545
Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. Prior to 2.3.2 , the DELETE /ssh/tunnel/disconnect/:tunnelName endpoint in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pki...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: conductor, zipkin, logstash-fips, thingsboard, nuxeo, traccar, logstash, druid, cassandra-reaper, conductor-fips, traccar-fips...
CVE-2026-69220 vulnerabilities
Vulnerabilities for packages: conductor, zipkin, logstash-fips, thingsboard, nuxeo, traccar, logstash, druid, cassandra-reaper, conductor-fips, traccar-fips...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: conductor, zipkin, logstash-fips, thingsboard, nuxeo, traccar, logstash, druid, cassandra-reaper, conductor-fips, traccar-fips...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: conductor, zipkin, logstash-fips, thingsboard, nuxeo, logstash, druid, cassandra-reaper, conductor-fips...
GHSA-5M9F-RPHJ-C435 vulnerabilities
Vulnerabilities for packages: conductor, zipkin, logstash-fips, thingsboard, nuxeo, traccar, logstash, druid, cassandra-reaper, conductor-fips, traccar-fips...
CVE-2026-63337 vulnerabilities
Vulnerabilities for packages: conductor, zipkin, logstash-fips, thingsboard, nuxeo, traccar, logstash, druid, cassandra-reaper, conductor-fips, traccar-fips...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, logstash, thingsboard, zipkin, druid...
GHSA-68MJ-5WR7-6FGG vulnerabilities
Vulnerabilities for packages: cassandra-reaper, logstash, thingsboard, zipkin, druid...
GHSA-QX7J-JV8M-FPPR vulnerabilities
Vulnerabilities for packages: cassandra-reaper, logstash, thingsboard, zipkin, druid...
GHSA-5CFW-78WC-WVJQ vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2026-38752 vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-63722
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...