270032 matches found
CVE-2026-76139
The acm-operator-bundle build process executes an unpinned script from stolostrum/release@master using full build credentials (GitHub tokens, registry passwords) without verifying authenticity or integrity. A remote attacker controlling that script could inject malicious code, gaining unauthorize...
CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-53545
Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. Prior to 2.3.2 , the DELETE /ssh/tunnel/disconnect/:tunnelName endpoint in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pki...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, logstash, logstash-fips, conductor...
CVE-2026-69220 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
GHSA-5M9F-RPHJ-C435 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
CVE-2026-63337 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, conductor-fips, zipkin, thingsboard, druid, nuxeo, traccar, traccar-fips, logstash, logstash-fips, conductor...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: zipkin, cassandra-reaper, thingsboard, druid, logstash...
GHSA-QX7J-JV8M-FPPR vulnerabilities
Vulnerabilities for packages: zipkin, cassandra-reaper, thingsboard, druid, logstash...
GHSA-68MJ-5WR7-6FGG vulnerabilities
Vulnerabilities for packages: zipkin, cassandra-reaper, thingsboard, druid, logstash...
GHSA-5CFW-78WC-WVJQ vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2026-38752 vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-63722
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...
CVE-2026-16913
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...
CVE-2026-16911
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow...