312818 matches found
CVE-2026-14163
In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...
CVE-2026-14163
Octopus Server's deployment variable snapshot can expose sensitive variables in clear-text under certain circumstances, leading to confidentiality impact (CVSS 7.1 HIGH, network-accessible, low privileges required). Affected component is the deployment variable snapshot; no specific version range...
EUVD-2026-63209
In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...
CVE-2026-14163
In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment variable snapshot in clear-text...
RLSA-2026:55787 Moderate: java-21-openjdk security update
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 For more details about the...
java-21-openjdk security update
An update is available for java-21-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environme...
Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authentication bypass vulnerability (CVE-2026-14525)
Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authentication bypass vulnerability when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details Refer to the security bulletins listed in the...
Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty (bundled with IBM Enterprise Application Runtimes) are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)
Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM Enterprise Application Runtimes, when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are...
CVE-2026-66141 vulnerabilities
Vulnerabilities for packages: exim...
GHSA-F965-GHFW-X6JX vulnerabilities
Vulnerabilities for packages: exim...
GHSA-332R-8PMF-8M9P vulnerabilities
Vulnerabilities for packages: wget...
GHSA-RCVQ-M9J9-6F4G vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-48022 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-73499 vulnerabilities
Vulnerabilities for packages: dapr, kine...
CVE-2026-2092 vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2026-66140 vulnerabilities
Vulnerabilities for packages: exim...
GHSA-F965-GHFW-X6JX vulnerabilities
Vulnerabilities for packages: exim...
GHSA-Q496-Q274-JGH9 vulnerabilities
Vulnerabilities for packages: exim...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, external-secrets-operator, rancher-agent, tekton-pipelines, cloud-provider-gcp-cloud-controller-manager, openbao, cluster-autoscaler, helm-operator, calico, kubeflow-pipelines, cloud-provider-azure, fluent-operator,...
CVE-2026-76795 AeternaLabsHQ PullMD REST API Endpoint api server-side request forgery
A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...