258666 matches found
CVE-2026-71464
The Red Hat Ansible Automation Platform (specifically the automation-controller ) contains a vulnerability in the LaunchConfigurationBaseSerializer.scm_branch component. The root cause is a missing validate_scm_branch() leading-dash check, which allows Schedule and WFJT Node to accept malicious i...
CVE-2026-31377
An Improper Authentication vulnerability in the Apache Doris Frontend FE meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. The affected endpoints relied on client-supplied node information for authentication without providing sufficient...
CVE-2026-31377 Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
An Improper Authentication vulnerability in the Apache Doris Frontend FE meta service allows an unauthenticated remote attacker to access internal metadata service endpoints. The affected endpoints relied on client-supplied node information for authentication without providing sufficient...
Malicious code in turbo-ws (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25d8c29cbfb317e1c88568514a999618bdeee25b2716b76e3db5062e9dd7a67 package.json at line 43 declares the sole dependency 'node-net-pool' as an HTTPS tarball of the 'main' branch of an unrelated GitHub account...
MAL-2026-16440 Malicious code in turbo-ws (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25d8c29cbfb317e1c88568514a999618bdeee25b2716b76e3db5062e9dd7a67 package.json at line 43 declares the sole dependency 'node-net-pool' as an HTTPS tarball of the 'main' branch of an unrelated GitHub account...
SUSE CVE-2026-78301
A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...
PT-2026-97518
Name of the Vulnerable Software and Affected Versions Sulu versions prior to 2.6.25 Sulu versions prior to 3.0.8 Description Sulu is an open-source PHP content management system based on the Symfony framework. A JCR-SQL2 injection exists in the Smart Content QueryBuilder within...
CVE-2026-66069: Missing Authorization
RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...
PT-2026-97557
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.1.13 RabbitMQ versions prior to 4.2.7 RabbitMQ versions prior to 4.3.0 Description An issue exists where the is authorized/2 function uses is authorized monitor for all methods. This allows a user with the monitori...
CVE-2026-92708
A flaw was found in devalue, a JavaScript library for serializing values. The stringify and uneval functions incorrectly serialize Node Buffers by emitting the entire backing ArrayBuffer instead of only the view. This vulnerability allows for the disclosure of up to 64 KB of unrelated process...
EUVD-2026-84005
KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join...
EUVD-2026-84032
KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes...
Malicious code in node-env-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0011ed2fd25fdc35a89f50c2eb1d7d895210908c637be0fcaca077d032baaee6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16403 Malicious code in node-env-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0011ed2fd25fdc35a89f50c2eb1d7d895210908c637be0fcaca077d032baaee6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
ROOT-APP-NPM-AIKIDO-2026-10689 AIKIDO-2026-10689 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10689 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10843 AIKIDO-2026-10843 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10843 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10840 AIKIDO-2026-10840 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10840 in the vm2 package for Root:npm. Multiple fixed versions available...