474412 matches found
CVE-2026-67438 OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check
OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/executor/arguments.go checkShellArgumentSafety function does not treat regex: custom argument types as unsafe for Shell mode actions, allowing values that pass...
CVE-2026-67437
OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/otoauth2/restapiauthoauth2.go OAuth2 login handler stores per-login state in the registeredStates map on every /oauth/login request without expiring, deleting, or...
CVE-2026-67437 OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)
OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/otoauth2/restapiauthoauth2.go OAuth2 login handler stores per-login state in the registeredStates map on every /oauth/login request without expiring, deleting, or...
Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest
Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...
CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6
CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6. A patched version of the package is available...
CVE-2026-56852 affecting package ignition-flatcar for versions less than 2.22.0-6
CVE-2026-56852 affecting package ignition-flatcar for versions less than 2.22.0-6. A patched version of the package is available...
CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7
CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...
CVE-2026-56852 affecting package git-lfs for versions less than 3.6.1-5
CVE-2026-56852 affecting package git-lfs for versions less than 3.6.1-5. A patched version of the package is available...
CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6
CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6. A patched version of the package is available...
CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29
CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29. A patched version of the package is available...
CVE-2026-56852 affecting package vitess for versions less than 19.0.4-11
CVE-2026-56852 affecting package vitess for versions less than 19.0.4-11. A patched version of the package is available...
CVE-2026-66035 affecting package libssh2 for versions less than 1.11.1-5
CVE-2026-66035 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...
CVE-2026-11605 affecting package bind for versions less than 9.20.26-1
CVE-2026-11605 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-13321 affecting package bind for versions less than 9.20.26-1
CVE-2026-13321 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12
CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12. A patched version of the package is available...
CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8
CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8. A patched version of the package is available...
CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5
CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5. A patched version of the package is available...
CVE-2026-56852 affecting package cf-cli for versions less than 8.7.11-8
CVE-2026-56852 affecting package cf-cli for versions less than 8.7.11-8. A patched version of the package is available...
CVE-2026-56852 affecting package moby-containerd-cc for versions less than 1.7.7-16
CVE-2026-56852 affecting package moby-containerd-cc for versions less than 1.7.7-16. A patched version of the package is available...