13234 matches found
PT-2026-22402
Name of the Vulnerable Software and Affected Versions Canarytokens versions prior to sha-7ff0e12 Description The Canarytokens PWA Canarytoken has a Self Cross-Site Scripting issue. A Canarytoken creator can execute Javascript code by inserting it into the title field of their PWA token. This allo...
Docker Model Runner security vulnerabilities
Docker Model Runner is an open-source Docker model runner developed by Docker. Versions of Docker Model Runner prior to 1.0.16 contained security vulnerabilities. These vulnerabilities stemmed from unvalidated POST endpoints that allowed arbitrary runtime flags to be accepted. This could enable...
CVE-2026-28400: Exposed Dangerous Method or Function
Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Versions prior to 1.0.16 expose a POST /engines/configure endpoint that accepts arbitrary runtime flags without authentication. These flags are passed directly to the underlying inference server llama.cpp...
Beszel path traversal vulnerability
Beszel is a lightweight server monitoring center developed by Hank’s individual developers. Versions of Beszel prior to 0.18.2 contained a path traversal vulnerability. This vulnerability stemmed from insufficient validation of container query parameters provided to users, which could allow...
CVE-2026-27734: Improper Limitation of a Pathname to a Restricted Directory
Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The agent constructs Docker Engine API URL...
PT-2026-22382
Name of the Vulnerable Software and Affected Versions Beszel versions prior to 0.18.2 Beszel versions 0.18.2 through 0.18.3 Description Beszel is a server monitoring platform. The platform’s authenticated API endpoints, specifically ''/api/beszel/containers/logs'' and...
docker-29.2.1_ce-37.1 on GA media (moderate)
docker-29.2.1ce-37.1 on GA media Announcement ID: openSUSE-SU-2026:10261-1 Rating: moderate Cross-References: CVE-2025-67499 CVSS scores: CVE-2025-67499 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2025-67499 SUSE : 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:...
Security update for docker-stable (moderate)
openSUSE security update: security update for docker-stable ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20262-1 Rating: moderate References: bsc1250508 bsc1250596 bsc1252290 Affected Products: openSUSE Leap 16.0...
EUVD-2026-8797
WireGuard Portal is Vulnerable to Privilege Escalation via User Self-Update to Admin Level...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-azure-authorization, hydra, crossplane-provider-aws-cloudformation, crossplane-provider-aws-sqs, q, nuclei, rancher-fleet, flux-kustomize-controller, syft, kyverno, terragrunt, argo-workflows, witness,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-azure-authorization, hydra, crossplane-provider-aws-cloudformation, crossplane-provider-aws-sqs, q, nuclei, rancher-fleet, flux-kustomize-controller, syft, kyverno, terragrunt, argo-workflows, witness,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: openbao, omnictl-multiarch, argo-rollouts, snyk-cli, dagger, pulumi-language-yaml, terragrunt, crossplane, trivy-fips, argo-events-fips, commercial-grafana, terraform-provider-azurerm-fips, scorecard, crossplane-provider-azure-sql, cluster-api, kubevela-fips, rclone,...
Security update for docker
This update for docker fixes the following issues: CVE-2025-58181: Fixed a bug in crypto/ssh where invalidated number of mechanisms can cause unbounded memory consumption. bsc1253904 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupda...
SUSE-SU-2026:0666-1 Security update for docker
This update for docker fixes the following issues: - CVE-2025-58181: Fixed a bug in crypto/ssh where invalidated number of mechanisms can cause unbounded memory consumption. bsc1253904...
Security update for docker-stable
This update for docker-stable fixes the following issues: CVE-2025-30204: Fixed a vulnerability in jwt-go which allowed excessive memory allocation during header parsing. bsc1240513 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdat...
SUSE-SU-2026:0659-1 Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2025-30204: Fixed a vulnerability in jwt-go which allowed excessive memory allocation during header parsing. bsc1240513...
CVE-2026-27899 WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update
WireGuard Portal or wg-portal is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with "IsAdmin": true in the JSON body. Aft...
CVE-2026-27899
WireGuard Portal or wg-portal is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with "IsAdmin": true in the JSON body. Aft...
Docker Desktop < 4.43.0 Information Disclosure
The version of Docker Desktop is prior to 4.43.0. It is therefore affected by an information disclosure vulnerability. - System environment variables are recorded in Docker Desktop diagnostic logs, when using shell auto-completion. This leads to unintentional disclosure of sensitive information...