11016 matches found
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: nerdctl, splunk-otel-collector, docker, delve, cilium, gitaly, hubble, hubble-ui, runc, witness, k3s, vitess, kuma, containerd, falcoctl, kubescape-operator, kubescape...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: nerdctl, splunk-otel-collector, docker, delve, cilium, gitaly, hubble, hubble-ui, runc, witness, k3s, vitess, kuma, containerd, falcoctl, kubescape-operator, kubescape...
Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-138 (ALASDOCKER-2026-138)
The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-138 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extract...
Amazon Linux 2023 : docker (ALAS2023-2026-2062)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2062 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...
Amazon Linux 2 : docker, --advisory ALAS2NITRO-ENCLAVES-2026-116 (ALASNITRO-ENCLAVES-2026-116)
The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-116 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...
Exploit for Classic Buffer Overflow in Cisco Secure_Endpoint
ZendTo 6.15-8 / ClamAV exact-profile RCE and root-variant repr...
CVE-2025-27771 Uptrain vulnerable to remote code execution via `/add_prompts` endpoint
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /addprompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...
CVE-2025-27771
In UpTrain versions 0.7.1 and earlier, the /add_prompts endpoint accepts untrusted checks and metadata parameters that are deserialized and evaluated without sanitization, enabling arbitrary Python code execution. An authenticated user can achieve full host compromise (typically the Docker contai...
Important: docker
Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ sectio...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: docker (UTSA-2026-050390)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-050390 advisory. Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypass...
PT-2026-76687
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /new run endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able...
Important: docker
Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Issue Correction: Run dnf update docker --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2062 --releasever 2023.12.20260817 to...
Important: docker
Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FA...
Exploit for CVE-2026-73519
CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthen...
Exploit for CVE-2026-20896
CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: tileserver-gl, jitsucom-jitsu...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Exploit Development Lab Overview This pr...
GO-2023-1897 vulnerabilities
Vulnerabilities for packages: k3d...