CVE-2026-41275

CVE-2026-41275 affects Flowise: prior to 3.1.0, the password reset flow exposed reset links over unsecured HTTP instead of HTTPS. The root cause described in the connected documents is the transmission of tokens via plaintext URLs driven by misconfigured origins (e.g., APP_URL) and the risk of MI...

UBUNTU-CVE-2024-45321

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers...

The vulnerability of the Artifactory platform for developing and delivering Docker Desktop container applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Artifactory platform for developing and delivering Docker container applications is related to the transmission of registry data in an open format due to the use of HTTP instead of HTTPS protocols. Exploiting this vulnerability can allow a malicious actor to gain...

PT-2023-7465 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions 4.17.x Description: The issue is related to the transmission of registry data in plain text due to the use of HTTP instead of HTTPS in the Artifactory module of Docker Desktop. This can allow a remote attacker to gain...