11264 matches found
CVE-2026-54248
Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...
CVE-2026-54248
Doco-CD , a GitOps continuous delivery tool for Docker Compose projects and Swarm stacks, contains an OCI trust-policy bypass prior to version 0.90.1 . A trust-boundary flaw allowed artifact-provided .doco-cd.yml configuration (with oci.verify: false) to override the global OCI_TRUST_POLICY, caus...
EUVD-2026-76757
Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...
CVE-2026-50025
Mousehole is a background service that updates a seedbox IP for MyAnonamouse (MAM) and provides a web management interface. Prior to version 0.4.05 , its HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The root cause is th...
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
A China-linked hacking group exploited a flaw in Sogou Input Method , one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' computers, security company Gen Digital said in research published Thursday. The attack started with a crafted link a...
PT-2026-90516
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A deployment mode designed to provide read-only access to stored data fails to restrict request methods on certain application programming interface routes. This...
PT-2026-90509
Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...
serverless [email protected]
Website • Documentation • X / Twitter • Community Slack • Forum The Serverless Framework – Makes it easy to use AWS Lambda and other managed cloud services to build applications that auto-scale, cost nothing when idle, and result in radically low maintenance. The Serverless Framework is a...
CVE-2026-88886 Renovate before 44.14.7 Command Injection via gradle-wrapper
Renovate is a dependency update automation tool. In versions before 44.14.7 and in Mend Renovate CE/EE distributions before 15.4.0, and the mend-renovate-enterprise-edition Helm chart before 10.4.0, the manager/gradle-wrapper module does not escape the distributionUrl value read from a repository...
@openhop/server: Path Traversal in Flow ID File Operations
Path Traversal in Flow ID File Operations Summary @openhop/server passes unsanitized HTTP route parameters directly to path.join when constructing filesystem paths for flow YAML files. An unauthenticated attacker who can reach the server can read arbitrary .yaml files accessible to the OpenHop...
securityonion v3.3.0-20260908
Security Onion Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes a comprehensive suite of tools designed to work together to provide visibility into your network and host activity. ✨ Features Security Onion...
Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.46 security update
Red Hat build of MicroShift release 4.19.46 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Kibana 9.0.x < 9.4.6 / 9.5.x < 9.5.1 Missing Authorization (ESA-2026-149)
The version of Kibana installed on the remote host is 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-149 advisory. - Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly...
PT-2026-89130
A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the...
io.quarkus:quarkus-spring-web-deployment (>=3.27.0, <=3.27.5.1) potentially affected by CVE-2026-19651 via io.quarkus:quarkus-spring-web (>=3.27.0, <=3.27.5.1)
io.quarkus:quarkus-spring-web MAVEN version =3.27.0, =3.27.0, =3.27.5.1 Source cves: CVE-2026-19651 Source advisory: MEND:CVE-2026-19651...
io.quarkus:quarkus-spring-web-deployment (>=3.33.0, <=3.33.3.1) potentially affected by CVE-2026-19651 via io.quarkus:quarkus-spring-web (>=3.33.0, <=3.33.3.1)
io.quarkus:quarkus-spring-web MAVEN version =3.33.0, =3.33.0, =3.33.3.1 Source cves: CVE-2026-19651 Source advisory: MEND:CVE-2026-19651...
io.quarkus:quarkus-spring-web-deployment (>=3.34.0, <=3.39.1) potentially affected by CVE-2026-19651 via io.quarkus:quarkus-spring-web (>=3.34.0, <=3.39.1)
io.quarkus:quarkus-spring-web MAVEN version =3.34.0, =3.34.0, =3.39.1 Source cves: CVE-2026-19651 Source advisory: MEND:CVE-2026-19651...
CVE-2026-72957
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...