82 matches found
GO-2026-5746 vulnerabilities
Vulnerabilities for packages: kots, ko, rancher-machine, rancher-agent, skopeo, k8sgpt, podman, docker-credential-gcr, nuclei, trivy, zot, buildah, spire-server, trivy-operator, undock, nerdctl, grafana, portieris, rancher, aws-otel-collector, amazon-cloudwatch-agent-operator,...
MINI-9CVG-R6Q3-5746
Bulletin has no description...
ECHO-6079-5746-4A4D
Bulletin has no description...
GO-2026-5746 Docker: 'PUT /containers/{id}/archive' executes container binary on the host in github.com/docker/docker
The Docker daemon's implementation of the "PUT /containers/id/archive" endpoint executes a container binary on the host when extracting an archive to a container. On Unix-like systems, this can be exploited if an attacker can control the container's filesystem or the archive being extracted,...
MINI-C3H3-5746-XV6M
Bulletin has no description...
WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 1.7.1,5.0-5.0.5 - Unauthenticated Arbitrary File Upload vulnerability
WordPress Drag and Drop Multiple File Upload Pro - WooCommerce plugin = 1.7.1,5.0-5.0.5 - Unauthenticated Arbitrary File Upload vulnerability discovered by Foxyyy in WordPress Plugin Drag and Drop Multiple File Upload Pro - WooCommerce versions = 1.7.1,5.0-5.0.5...
CVE-2025-5746
creationtimestamp| type| source ---|---|--- 2025-07-02 09:43:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxwgiyagv2r...
CVE-2025-5746
The Drag and Drop Multiple File Upload Pro - WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dnduploadcf7uploadchunks function in version 5.0 - 5.0.5 when bundled with the PrintSpace theme and all versions up to, and including,...
CVE-2025-5746
The CVE-2025-5746 entry describes an unauthenticated arbitrary file upload flaw in the Drag and Drop Multiple File Upload (Pro) – WooCommerce, affecting both the Pro plugin (versions 5.0–5.0.5 bundled with PrintSpace) and the standalone version up to 1.7.1. The root cause is missing file-type val...
CVE-2020-5746
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...
CVE-2024-5746
CVE-2024-5746 describes a Server-Side Request Forgery in GitHub Enterprise Server that allowed an authenticated Site Administrator to achieve arbitrary code execution on the instance. Affected versions were all before 3.13, with fixes in 3.12.5, 3.11.11, 3.10.13, and 3.9.16. Public references fro...
CVE-2024-5746
A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the Site Administrator role to gain arbitrary code execution capability on the GitHub Enterprise Server instance. Exploitation required authenticated access to GitHub Enterprise...
CVE-2023-5746
creationtimestamp| type| source ---|---|--- 2023-10-25 22:49:21+00:00| seen| https://t.me/cibsecurity/72873...
CVE-2023-5746
CVE-2023-5746 affects Synology Camera Firmware, specifically the BC500 and TC500 models. The issue is a vulnerability in the cgi component involving an externally-controlled format string, enabling remote code execution via unspecified vectors on firmware versions prior to 1.0.5-0185 . Public ref...
CVE-2023-5746
A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500...
Osprey Pump Controller 1.0.1 - Unauthenticated File Disclosure
Exploit Title: Osprey Pump Controller 1.0.1 - Unauthenticated File Disclosure Exploit Author: LiquidWorm Vendor: ProPump and Controls, Inc. Product web page: https://www.propumpservice.com | https://www.pumpstationparts.com Affected version: Software Build ID 20211018, Production 10/18/2021 Mirag...
Ubuntu 16.04 ESM : HarfBuzz vulnerability (USN-5746-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5746-1 advisory. Behzad Najjarpour Jabbari discovered that HarfBuzz incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of servic...
CVE-2017-5746
This CVE entry is rejected/not used and does not represent an active vulnerability.
SUSE: Security Advisory (SUSE-SU-2016:2189-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...