9096 matches found
stackrox v4.11.4-rc.1
Table of Contents StackRox Kubernetes Security Platform Table of Contents Community Deploying StackRox Quick Installation using Helm Manual Installation using Helm Installation using the Operator Installation via Scripts Kubernetes Distributions EKS, AKS, GKE OpenShift Docker Desktop, Colima, or...
EUVD-2026-76745
A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...
fleet fleet-v4.91.1
News · Report a bug · Docs · Why open source? · Art Open-source platform for IT and security teams with thousands of computers. Designed for APIs, GitOps, webhooks, YAML, and humans. What's it for? Fleet gives you a single system to secure and maintain all your computing devices over the air. You...
CVE-2026-90454 Missing authorization in Malcolm
A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request...
CVE-2026-90448
CVE-2026-90448 affects a read-only deployment mode that proxies a set of API routes without restricting allowed request methods. One of these routes accepts a request that creates or overwrites a stored record with an attacker-chosen identifier, using the application's own elevated backend creden...
CVE-2026-90448 Missing Authorization in Malcolm
A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...
EUVD-2026-76757
Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...
CVE-2026-54248
Doco-CD , a GitOps continuous delivery tool for Docker Compose projects and Swarm stacks, contains an OCI trust-policy bypass prior to version 0.90.1 . A trust-boundary flaw allowed artifact-provided .doco-cd.yml configuration (with oci.verify: false) to override the global OCI_TRUST_POLICY, caus...
CVE-2026-50025
Mousehole is a background service that updates a seedbox IP for MyAnonamouse (MAM) and provides a web management interface. Prior to version 0.4.05 , its HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The root cause is th...
PT-2026-90516
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A deployment mode designed to provide read-only access to stored data fails to restrict request methods on certain application programming interface routes. This...
PT-2026-90509
Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...
serverless [email protected]
Website • Documentation • X / Twitter • Community Slack • Forum The Serverless Framework – Makes it easy to use AWS Lambda and other managed cloud services to build applications that auto-scale, cost nothing when idle, and result in radically low maintenance. The Serverless Framework is a...
CVE-2026-88886 Renovate before 44.14.7 Command Injection via gradle-wrapper
Renovate is a dependency update automation tool. In versions before 44.14.7 and in Mend Renovate CE/EE distributions before 15.4.0, and the mend-renovate-enterprise-edition Helm chart before 10.4.0, the manager/gradle-wrapper module does not escape the distributionUrl value read from a repository...
@openhop/server: Path Traversal in Flow ID File Operations
Path Traversal in Flow ID File Operations Summary @openhop/server passes unsanitized HTTP route parameters directly to path.join when constructing filesystem paths for flow YAML files. An unauthenticated attacker who can reach the server can read arbitrary .yaml files accessible to the OpenHop...
securityonion v3.3.0-20260908
Security Onion Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes a comprehensive suite of tools designed to work together to provide visibility into your network and host activity. ✨ Features Security Onion...
ROOT-OS-DEBIAN-12-CVE-2025-68733 CVE-2025-68733 in linux - Patched by Root
Root has patched CVE-2025-68733 in the linux package for Root:Debian:12. Multiple fixed versions available...
Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.46 security update
Red Hat build of MicroShift release 4.19.46 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
PT-2026-89130
A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the...
Kibana 9.0.x < 9.4.6 / 9.5.x < 9.5.1 Missing Authorization (ESA-2026-149)
The version of Kibana installed on the remote host is 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-149 advisory. - Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly...
