CVE-2025-14601

vsDesk task scheduler passes unsanitized input to OS commands; an authenticated admin can inject arbitrary commands (CVSS 8.6 High). Patch available in versions 14.0101 and later from vendor https://vsdesk.ru/. No in-the-wild exploitation reported. Advisory: https://github.com/klsecservices/Advis...

CVE-2026-14163

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...

CVE-2026-14163

Octopus Server's deployment variable snapshot can expose sensitive variables in clear-text under certain circumstances, leading to confidentiality impact (CVSS 7.1 HIGH, network-accessible, low privileges required). Affected component is the deployment variable snapshot; no specific version range...

EUVD-2026-63209

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...

CVE-2026-14163

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...

RLSA-2026:55787 Moderate: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 For more details about the...

java-21-openjdk security update

An update is available for java-21-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environme...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

SAP NetWeaver Application Server Java 7.5 - Local File Inclusion

SAP NetWeaver Application Server Java 7.5 is susceptible to local file inclusion in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS. This can allow remote attackers to read arbitrary files via a .. dot dot in the query string, as exploited in the wild in August 2017, aka SAP Security Note...

CVE-2026-66141 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

GHSA-332R-8PMF-8M9P vulnerabilities

Vulnerabilities for packages: wget...

GHSA-RCVQ-M9J9-6F4G vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-48022 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-73499 vulnerabilities

Vulnerabilities for packages: dapr, kine...

CVE-2026-2092 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-66140 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

GHSA-Q496-Q274-JGH9 vulnerabilities

Vulnerabilities for packages: exim...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, kwok, kubernetes-csi-external-attacher, cilium, grafana, cluster-api-helm-controller, fluent-operator, rancher-agent, cert-manager, external-secrets-operator, openfga, istio, yunikorn-k8shim, kubernetes-csi-external-resizer, spicedb,...