494 matches found
CVE-2026-73292
CVE-2026-73292 – CSRF Password Change in Semaphore UI For educational and responsible disclosure purposes only. This vulnerability has been reported in GHSA-8cj9-r88m-8945 and affect semaphoreui versions below 2.18.21. Vulnerability The password change endpoint of Semaphore UI does not implement...
CVE-2026-112305
Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...
CVE-2026-112305
Semaphore UI versions through 2.19.16 are vulnerable to remote code execution (RCE) due to an improperly controlled modification of dynamically-determined object attributes (CWE-915). Users with the task_runner role can override protected Ansible variables by injecting arbitrary keys into the tas...
EUVD-2026-104397
Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...
CVE-2026-112305 Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override
Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...
CVE-2026-112305 Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override
Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...
CVE-2026-112305 Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override
Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...
CVE-2026-112305: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...
PT-2026-117465
Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task runner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansible ssh common args with a ProxyCommand or...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
A issue was discovered in the file drivers/media/dvb-core/dvbfrontend.c within the Linux kernel version 6.2. There is a blocking operation that occurs when a task is in the !TASKRUNNING state. In the function dvbfrontendgetevent, the function waiteventinterruptible is called; the condition used i...
CVE-2026-98245
In the Linux kernel, the following vulnerability has been resolved: btrfs: take commit root semaphore when iterating in markblockgrouptocopy markblockgrouptocopy iterates over the commit root with skiplocking=true. A concurrent transaction commit can swap and free the commit root during iteration...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: fixed a recursive semaphore deadlock in the fiemap call syzbot detected a OCFS2 hang due to a recursive semaphore on the FSIOCFIEMAP of the extent list in a specially crafted mmap file. contextswitch...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hfi1: Fixed a use-after-free bug related to the mm struct. Under certain conditions, such as MPIAbort, the hfi1 cleanup code may represent the last reference held on the task’s mm. hfi1mmurbunregister then releases the la...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Added a timeout to the acquisition of the command queue semaphore. Prevented forced completion handling on an entry that has not yet been assigned an index, thereby avoiding an out-of-bounds access at idx = -22. Instead...
CVE-2026-101909 vulnerabilities
Vulnerabilities for packages: nextcloud-server, commercial-gitlab-rails-ee, langfuse-fips, opensearch-dashboards, lambda-nodejs, commercial-gitlab-rails-ee-fips, lerna, prism, kibana, awx, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-centraldashboard, librechat,...
GHSA-C29M-XWM3-CM6R vulnerabilities
Vulnerabilities for packages: nextcloud-server, commercial-gitlab-rails-ee, langfuse-fips, opensearch-dashboards, lambda-nodejs, commercial-gitlab-rails-ee-fips, lerna, prism, kibana, awx, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-centraldashboard, librechat,...
CVE-2026-101901 vulnerabilities
Vulnerabilities for packages: nextcloud-server, commercial-gitlab-rails-ee, langfuse-fips, opensearch-dashboards, lambda-nodejs, commercial-gitlab-rails-ee-fips, lerna, prism, kibana, awx, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-centraldashboard, librechat,...
CVE-2026-101903 vulnerabilities
Vulnerabilities for packages: nextcloud-server, commercial-gitlab-rails-ee, langfuse-fips, opensearch-dashboards, lambda-nodejs, commercial-gitlab-rails-ee-fips, lerna, prism, kibana, awx, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-centraldashboard, librechat,...
CVE-2026-101907 vulnerabilities
Vulnerabilities for packages: nextcloud-server, commercial-gitlab-rails-ee, langfuse-fips, opensearch-dashboards, lambda-nodejs, commercial-gitlab-rails-ee-fips, lerna, prism, kibana, awx, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-centraldashboard, librechat,...
GHSA-542G-H47M-68V8 vulnerabilities
Vulnerabilities for packages: nextcloud-server, commercial-gitlab-rails-ee, langfuse-fips, opensearch-dashboards, lambda-nodejs, commercial-gitlab-rails-ee-fips, lerna, prism, kibana, awx, wazuh-dashboard, opensearch-dashboards-fips, redisinsight, semaphore, kubeflow-centraldashboard, librechat,...