12 matches found
CVE-2026-41428
Budibase is an open-source low-code platform. Prior to 3.35.4, the authenticated middleware uses unanchored regular expressions to match public no-auth endpoint patterns against ctx.request.url. Since ctx.request.url in Koa includes the query string, an attacker can access any protected endpoint ...
CVE-2026-41428
creationtimestamp| type| source ---|---|--- 2026-04-16 08:49:52+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-8783-3wgf-jggf 2026-04-28 17:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkl33hycs62p...
CVE-2025-41428
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...
CVE-2025-41428
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...
CVE-2025-41428
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...
CVE-2022-41428
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadBits function in mp4mux...
CVE-2022-41428
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadBits function in mp4mux...
CVE-2022-41428
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4BitReader::ReadBits function in mp4mux...
CVE-2022-41428
CVE-2022-41428 affects Bento4 v1.6.0-639, where a heap overflow occurs in the AP4_BitReader::ReadBits function within the mp4mux component. The vulnerability is described as a heap overflow with confirmed impact to confidentiality, integrity, and availability. The NVD entry lists a CVSS v3.1 base...