Filter
Software
Octopus HalibutIn Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote …
10
First published (updated )
Octopus Octopus ServerIn Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do n…
9.8
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null by…
9.8
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Server where access is managed by an external authentication provide…
9.8
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Server it is possible for a session token to be valid indefinitely d…
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus ServerIn Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission t…
First published (updated )
Octopus Octopus DeployIn Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to thei…
8.8
First published (updated )
Octopus Octopus DeployAn issue was discovered in Octopus Deploy before 4.1.9. Any user with user editing permissions can m…
8.8
First published (updated )
Octopus Octopus DeployIn Octopus Deploy versions 3.2.11 - 4.1.5 (fixed in 4.1.6), an authenticated user with ProcessEdit p…
8.8
First published (updated )
Octopus Octopus DeployCVE-2017-17665
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus DeployIn Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user wit…
8.1
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Server it is possible to use the Git Connectivity test function on t…
8.1
First published (updated )
Octopus TentacleWhen Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions…
7.8
First published (updated )
Octopus TentacleWhen Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus DeployWhen Octopus Server is installed using a custom folder location, folder ACLs are not set correctly a…
7.8
First published (updated )
Octopus ServerWhen configuring Octopus Server if it is configured with an external SQL database, on initial config…
7.5
First published (updated )
Octopus ServerWhen configuring Octopus Server if it is configured with an external SQL database, on initial config…
7.5
First published (updated )
Octopus Octopus DeployOctopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variab…
7.5
First published (updated )
Octopus Octopus DeployAn issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may a…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus DeployIn Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in…
7.5
First published (updated )
Octopus Octopus ServerIn Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with …
7.5
First published (updated )
Octopus ServerCleartext storage of sensitive information in multiple versions of Octopus Server where in certain s…
7.5
First published (updated )
Octopus Octopus DeployIn Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user cr…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus DeployIn Octopus Deploy before 2018.4.7, target and tenant tag variable scopes were not checked against th…
7.5
First published (updated )
Octopus Octopus ServerWhen generating a user invitation code in Octopus Server, the validity of this code can be set for a…
7.5
First published (updated )
Octopus Octopus DeployIn Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled vi…
7.5
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the p…
7.5
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.