CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...

CVE-2026-92543

Docker Engine is vulnerable to a security bypass where a registry hostname can be incorrectly classified as insecure. The loadInsecureRegistries() function injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. The isCIDRMatch function returns true if any resolved address matches these CID...

Resources Downloaded over Insecure Protocol

Overview org.webjars.npm:esbuild is an An extremely fast JavaScript and CSS bundler and minifier. Affected versions of this package are vulnerable to Resources Downloaded over Insecure Protocol in the installFromNPM process. An attacker can execute arbitrary code with the privileges of the Deno...

EUVD-2022-48327

Malicious code in bioql PyPI...

CVE-2022-45459

Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent Windows before build 30025, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45459

Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent Windows before build 30025, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45459

Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent Windows before build 30025, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45459: Exposure of Sensitive Information to an Unauthorized Actor

Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent Windows before build 30025, Acronis Cyber Protect 15 Windows before build 30984...

Acronis Agent和Acronis Cyber Protect 安全漏洞

Acronis Agent and Acronis Cyber Protect are both products of Acronis Singapore.Acronis Agent is an agent software.Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise. Combining backup, anti-malware, network security, and endpoint management capabilities su...

PT-2022-27524 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent Windows versions before build 30025 Acronis Cyber Protect 15 Windows versions before build 30984 Description: The issue is related to sensitive information disclosure due to insecure registry permissions. Recommendations: For...

CVE-2022-25804

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. Insecure permissions for the serverconfig registry key under JavaSoft\Prefs\de\igel\rm\config in HKEYLOCALMACHINE\SOFTWARE allow an unprivileged local attacker to read the encrypted dbuser and dbpassword values for the U...

docker security and bug fix update

1.3.2-1.0.1 - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel - Restore SysV init scripts for Oracle Linux 6 - Require Oracle Unbreakable Enterprise Kernel Release 3 or higher - Rename as docker. - Re-enable btrfs graphdriver support 1.3.2-1 - Update source to 1.3....

imlock2006.txt

IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...