14 matches found
CVE-2026-41428
Budibase is an open-source low-code platform. Prior to 3.35.4, the authenticated middleware uses unanchored regular expressions to match public no-auth endpoint patterns against ctx.request.url. Since ctx.request.url in Koa includes the query string, an attacker can access any protected endpoint ...
@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by CVE-2026-41428 via @budibase/backend-core (>=3.0.0, <=3.2.26)
@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-41428 Source advisory: SNYK:JS-BUDIBASEBACKENDCORE-16115495...
@budibase/cli (>=3.0.0, <=3.2.26), @budibase/pro (>=3.0.0, <=3.2.26) +2 more potentially affected by CVE-2026-41428 via @budibase/backend-core (>=3.0.0, <=3.2.26)
@budibase/backend-core NPM version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.2.26 Source cves: CVE-2026-41428 Source advisory: OSV:GHSA-8783-3WGF-JGGF...
CVE-2026-41428
creationtimestamp| type| source ---|---|--- 2026-04-16 08:49:52+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-8783-3wgf-jggf 2026-04-28 17:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkl33hycs62p...
CVE-2025-41428
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...
CVE-2025-41428
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...
CVE-2025-41428
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...
CVE-2022-41428
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadBits function in mp4mux...
CVE-2022-41428
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadBits function in mp4mux...
CVE-2022-41428
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadBits function in mp4mux...
CVE-2022-41428
CVE-2022-41428 affects Bento4 v1.6.0-639, where a heap overflow occurs in the AP4_BitReader::ReadBits function within the mp4mux component. The vulnerability is described as a heap overflow with confirmed impact to confidentiality, integrity, and availability. The NVD entry lists a CVSS v3.1 base...
CVE-2021-41428
creationtimestamp| type| source ---|---|--- 2021-09-23 18:29:32+00:00| seen| https://t.me/cibsecurity/29313...