438 matches found
CVE-2026-40981
When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 inclusive; upgrade to 3.1.14 or greater...
PT-2026-38329
Name of the Vulnerable Software and Affected Versions Spring Cloud Config versions 3.1.0 through 3.1.13 Spring Cloud Config versions 4.1.0 through 4.1.9 Spring Cloud Config versions 4.2.0 through 4.2.6 Spring Cloud Config versions 4.3.0 through 4.3.2 Spring Cloud Config versions 5.0.0 through 5.0...
VMware Spring Cloud Config 安全漏洞
VMware Spring Cloud Config is a configuration management solution for distributed systems developed by VMware, Inc. This product primarily provides server and client support for external configurations in distributed systems. There is a security vulnerability in VMware Spring Cloud Config, which...
CVE-2026-31626 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...
GHSA-GGGW-8CQ2-45CP vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...
CVE-2026-3259
A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error...
CVE-2026-3259: Generation of Error Message Containing Sensitive Information
A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error...
PT-2026-34647
A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error...
PT-2026-32955
Name of the Vulnerable Software and Affected Versions OAuth2 Proxy versions prior to 7.15.2 Description A configuration-dependent authentication bypass exists in deployments using auth request-style integration, such as nginx auth request. The issue occurs when either the --ping-user-agent variab...
GHSA-PW2V-CMFH-X2P3 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...
CVE-2026-23208 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...
GHSA-5R72-P4CV-H344 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...
GHSA-2MVM-XGM9-R324 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-azure, linux-gcp...
S3CDM: A Secret-Sharing-Scheme-Based Cyberattack Detection Model and Its Simulation Implementation
We design and develop a secret-sharing-scheme-based cyberattack detection modelS3CDMthat can detect unauthorized or illegal activities especially insider attacks and protect sensitive information within complex network infrastructures of large organizations. The model splits a secret among a grou...
EUVD-2026-19442
Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in authentication helper execution where helper configuration values are executed using shell=true without input validation. Attackers who can influence authentication settings can inject shell...
[SECURITY] Fedora 44 Update: rust-reqsign-google-3.0.0-1.fc44
Google Cloud Platform signing implementation for reqsign...
CVE-2026-2473: Generation of Predictable Numbers or Identifiers
Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to but not including 1.133.0 on Google Cloud Platform allows an unauthenticated remote attacker to achieve cross-tenant remote code execution, model theft, and poisoning via pre-creating predictabl...
GHSA-H355-32PF-P2XM vulnerabilities
Vulnerabilities for packages: spegel, azure-service-operator, kyverno-policy-reporter-ui, kyverno-notation-aws, crane, ytt, helm-mapkubeapis, gcsfuse, rancher-system-agent, src-fingerprint, grafana-alloy, timescaledb-parallel-copy, external-dns, libnvidia-container, mariadb-operator, kots,...