Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion

A directory traversal vulnerability in the Affiliate Datafeeds comdatafeeds component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1979 info: name: Joomla! Component Affiliate Datafeeds 880 - Local Fi...

SUSE CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This...

CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This...

DEBIAN-CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This...

CVE-2026-1979

CVE-2026-1979 affects mruby up to version 3.4.0. The issue arises in the function mrb_vm_exec within the file src/vm.c of the component described as the JMPNOT-to-JMPIF Optimization . Exploitation can lead to a use-after-free condition and requires local access to the target environment. The vuln...

CVE-2026-1979

A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been published and may be used. This...

Linux Distros Unpatched Vulnerability : CVE-2026-1979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in mruby up to 3.4.0. This affects the function mrbvmexec of the file src/vm.c of the component JMPNOT-to-JMPIF Optimization. Executing a...

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. This bulletin contains information regarding the vulnerability and its fixture...

ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +226 more potentially affected by CVE-2025-1979 via ray (>=0.5.0 <=2.42.1)

ray PYPI version =0.5.0, =0.0.1b1, =0.1.1, =0.0.3, =0.1.16, =0.1.4, =0.2.1, =1.1.1, =0.1.3, =1.0.11 - argos-trains =0.1.0 and more Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +226 more potentially affected by CVE-2025-1979 via ray (>=0.5.0 <=2.42.1)

ray PYPI version =0.5.0, =0.0.1b1, =0.1.1, =0.0.3, =0.1.16, =0.1.4, =0.2.1, =1.1.1, =0.1.3, =1.0.11 - argos-trains =0.1.0 and more Source cves: CVE-2025-1979 Source advisory: OSV:PYSEC-2025-23...

CVE-2025-1979

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

CVE-2025-1979

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

CVE-2025-1979

Summary: CVE-2025-1979 affects the Python package Ray prior to 2.43.0, where the Redis password can be logged in standard logging when the password is passed as an argument. This is exploitable if logging is enabled, Redis uses password authentication, and those logs are accessible to an attacker...

CVE-2025-1979

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

CVE-2025-1979

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +131 more potentially affected by CVE-2025-1979 via ray (>=2.0.0 <=2.42.1)

ray PYPI version =2.0.0, =0.0.1b1, =0.2.5, =0.2.2, =1.1.1, =0.5.3b20221011, =0.1.1b20230324, =0.4.2 and more Source cves: CVE-2025-1979 Source advisory: SNYK:PYTHON-RAY-8745212...

SUSE: Security Advisory (SUSE-SU-2024:1979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

io.automatiko.quarkus:automatiko-operator-deployment (>=0.4.0 <=0.53.0), io.javaoperatorsdk:operator-framework-quarkus-extension-deployment (>=1.6.2 <=1.7.5) +18 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (>=1.10.0.CR1 <=3.7.2)

io.quarkus:quarkus-kubernetes-deployment MAVEN version =1.10.0.CR1, =0.4.0, =1.6.2, =0.0.3, =0.0.3, =1.0.1, =1.0.1, =4.0.0, =2.0.0, =1.8.0, =6.0.0, =7.2.1, =7.6.1, =7.6.1, =7.6.1, =2.0.0, =3.0.3 and more Source cves: CVE-2024...

CVE-2024-1979

creationtimestamp| type| source ---|---|--- 2024-03-13 11:41:20+00:00| seen| https://t.me/ctinow/206594 2024-03-13 11:46:25+00:00| seen| https://t.me/ctinow/206600...

CVE-2024-1979

CVE-2024-1979 affects Quarkus with an information leak in the quarkus-kubernetes-deployment component related to annotation handling. The Red Hat advisory RHSA-2024:1662 lists CVE-2024-1979 as a security fix affecting the Red Hat build of Quarkus, specifically noting a security update for Quarkus...