265669 matches found
Apache OFBiz Directory Traversal - Remote Code Execution
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...
CLEANSTART-2026-WU91498 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh
Security vulnerability affects the loki package. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh...
CLEANSTART-2026-SR68419 Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh
Security vulnerability affects the loki package. The Verify method for FIDO/U2F security key types sk-ecdsa-sha2-nistp256@openssh...
CLEANSTART-2026-ZA34964 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the loki package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-MH81237 For certain crafted inputs, a 'ed25519
Security vulnerability affects the loki package. For certain crafted inputs, a 'ed25519...
CLEANSTART-2026-KU01035 (*x509
Security vulnerability affects the loki package. x509...
CLEANSTART-2026-IC69892 etcd is a distributed key-value store for the data of a distributed system
Security vulnerability affects the loki package. etcd is a distributed key-value store for the data of a distributed system...
CLEANSTART-2026-BN60910 Prometheus is an open-source monitoring system and time series database
Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...
CLEANSTART-2026-JK20975 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the loki package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
EUVD-2025-26672
Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...
ROOT-OS-DEBIAN-12-CVE-2023-44431 CVE-2023-44431 in bluez - Patched by Root
Root has patched CVE-2023-44431 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-51589 CVE-2023-51589 in bluez - Patched by Root
Root has patched CVE-2023-51589 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27904 CVE-2026-27904 in minimatch - Patched by Root
Root has patched CVE-2026-27904 in the minimatch package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2023-20883 CVE-2023-20883 in org.springframework.boot:spring-boot-autoconfigure - Patched by Root
Root has patched CVE-2023-20883 in the org.springframework.boot:spring-boot-autoconfigure package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41239 CVE-2026-41239 in dompurify - Patched by Root
Root has patched CVE-2026-41239 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54288 CVE-2026-54288 in hono - Patched by Root
Root has patched CVE-2026-54288 in the hono package for Root:npm. Multiple fixed versions available...
ThinkPHP < 3.2.4 - Remote Code Execution
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...
CLEANSTART-2026-MS81723 NumberInput
Security vulnerability affects the apache-nifi package. NumberInput...