2026

Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-back

Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plug

A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buff

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCo

Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lam

A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-

A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autof

A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFE

When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access a

Gitea expanded a workflow's static `strategy.matrix` into its full Cartesian product without a size limit when creating

When Gitea's web installer is reachable against a database that already contains users, such as after `INSTALL_LOCK` has

With `[migrations] ALLOWED_DOMAINS` set to a matching entry such as `*` or a hostname wildcard, Gitea's migration URL va

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid sli

When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" o

Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gi

Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather t

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names w

Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was

When a push was authenticated with a deploy key, Gitea recorded the repository owner as the pusher, so permission checks

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circum

A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manage

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote a

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote a

An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a loc

A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow

A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exp

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with ad

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that co

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploi

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could a

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow m

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation cou

A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager c

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successf

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privil

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Ma

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authentic

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to c

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass P

A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful explo

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager.

A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated re