CVE Browser

Command Injection in Puppet Enterprise

XML External Entity in Akana API Platform

Unauthenticated Remote Code Execution in Akana API Platform

Cleartext Storage of Sensitive Information for Puppet Resource API

Code Injection in Perforce P4 (Helix Core)

Insecure Default Configuration in P4 Server

PII Leak Due to Change in EOR Handling

Missing authorization in BlazeMeter Jenkins Plugin

Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5

OS Command Injection

Privilege Chaining in Delphix

Improper Access Control in Delphix Masking Engine

Potential Username Enumeration in Helix ALM

Username Enumeration in Gliffy

Unauthenticated Denial of Service via Auto Generation Function

Unauthenticated Denial of Service via Refuse Function

Unauthenticated Denial of Service via Shutdown Function

Unicode "best fit" argument injection

XML External Entity in Akana

Overly Verbose Errors in SAML Integration

SAML Replay in Akana

Command Injection in Helix ALM

Command Injection in Helix Sync

Unauthenticated Remote Denial-of-Service via Buffer in Helix Core

Unauthenticated Remote Denial-of-Service (Commit) in Helix Core