178552 matches found
CVE-2026-55998
The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...
CVE-2026-55998 Cluster Existence Oracle via Unauthenticated Import Endpoint
The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...
EUVD-2026-53258
The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...
CVE-2026-55998 Cluster Existence Oracle via Unauthenticated Import Endpoint
The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...
CVE-2026-24076
Memory Corruption when processing registry values with incorrect types using a direct query method...
MAL-2026-11786 Malicious code in @qlik/carboncopy (npm)
npm/@qlik/carboncopy is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...
CVE-2026-24076
Technical details for CVE-2026-24076 are not publicly available in the provided documents. No affected products, components, versions, vectors, or fixes are disclosed. Monitor for updates from the sources in the initial entry.
CVE-2026-24076 Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory Corruption when processing registry values with incorrect types using a direct query method...
EUVD-2026-52729
Memory Corruption when processing registry values with incorrect types using a direct query method...
Malicious code in @servicetitan/toolbelt-shared-registry (npm)
npm/@servicetitan/toolbelt-shared-registry is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...
CVE-2026-57279
creationtimestamp| type| source ---|---|--- 2026-08-03 11:24:29+00:00| seen| https://jvn.jp/en/jp/JVN72334274...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-41695 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry...
CVE-2026-41695 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry...
CVE-2026-41843 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-72PG-X5F8-J25J vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-957G-F97V-VPPC vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...