91320 matches found
CVE-2026-66384: Improper Limitation of a Pathname to a Restricted Directory
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-16863: Out-of-bounds Read
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...
CVE-2026-16907: Out-of-bounds Write
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper bounds checking...
CVE-2026-17083: Out-of-bounds Write
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-68755: Incorrect Authorization
A bundle writer may create misleading release promotion information under specific conditions...
Linux Distros Unpatched Vulnerability : CVE-2026-19654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery ca...
CVE-2026-66375: Missing Authorization
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
CVE-2026-69105: Insufficient Verification of Data Authenticity
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...
CVE-2026-16860: Uncontrolled Search Path Element
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...
CVE-2026-73262: Improper Neutralization of Input During Web Page Generation
Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resourcetags, assembled by unrolldict and parsehtmlstring, into generated reports without HTML escaping, allowing a cloud principal who can modify a scanned...
CVE-2026-65926: Missing Authorization
An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known...
CVE-2026-68757: Improper Verification of Cryptographic Signature
A user with access to a valid SAML response may impersonate another user under specific conditions...
CVE-2026-19519
A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service...
CVE-2026-19519 Claircore: claircore: denial of service via unchecked type assertion in rpm header parser
A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service...
CVE-2026-19519 Claircore: claircore: denial of service via unchecked type assertion in rpm header parser
A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service...
CVE-2026-19519
A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service. Mitigation Where possible, configur...
grype v0.117.0
Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...
vuln-scanner
vuln-scanner Scanner de vulnerabilidades web em Python puro...
PT-2026-70081
Name of the Vulnerable Software and Affected Versions claircore affected versions not specified Description A flaw in the RPM package scanner allows a denial of service. Specifically, crafted RPM header data within a container layer can trigger an unchecked type assertion, causing the scanner to...