GHSA-X6WF-F3PX-WCQX vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, wazuh-dashboard-fips, npm, librechat, gitlab-rails-ce, gitlab-rails-ce-fips, actions-runner, sqlpad, arangodb...

GHSA-2V35-W6HQ-6MFW vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, wazuh-dashboard-fips, npm, librechat, gitlab-rails-ce, gitlab-rails-ce-fips, actions-runner, sqlpad, arangodb...

CVE-2026-41672 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, wazuh-dashboard-fips, npm, librechat, gitlab-rails-ce, gitlab-rails-ce-fips, actions-runner, sqlpad, arangodb...

CVE-2026-41675 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, wazuh-dashboard-fips, npm, librechat, gitlab-rails-ce, gitlab-rails-ce-fips, actions-runner, sqlpad, arangodb...

GHSA-J759-J44W-7FR8 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, wazuh-dashboard-fips, npm, librechat, gitlab-rails-ce, gitlab-rails-ce-fips, actions-runner, sqlpad, arangodb...

CVE-2026-34601 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, saf, wazuh-dashboard-fips, gitlab-rails-ce, gitlab-rails-ce-fips, sqlpad, arangodb...

CVE-2019-25367

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface index.html through search, user management, and API parameters. Attackers can inject scripts via parameters in /db/system/admin/aardvark/index.html to execute JavaScript i...

EUVD-2019-19411

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface index.html through search, user management, and API parameters. Attackers can inject scripts via parameters in /db/system/admin/aardvark/index.html to execute JavaScript i...

CVE-2019-25367

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html). The issues allow injection of scripts via parameters in /_db/_system/_admin/aardvark/index.html, enabling JavaScript execution in authenticated users’ browse...

CVE-2019-25367 ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface index.html through search, user management, and API parameters. Attackers can inject scripts via parameters in /db/system/admin/aardvark/index.html to execute JavaScript i...

CVE-2019-25367

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface index.html through search, user management, and API parameters. Attackers can inject scripts via parameters in /db/system/admin/aardvark/index.html to execute JavaScript i...

EUVD-2021-12795

Malware in sbrugna...

EUVD-2021-12797

Malware in sbrugna...

EUVD-2021-12796

Malware in sbrugna...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nerdctl-fips, sbom-scorecard, logstash, rekor, newrelic-k8s-metadata-injection-fips, kbld, cluster-api-azure-controller, argo-events-fips, step-fips, kube-logging-operator, peerdb-flow, openbao-k8s, net-kourier-fips, secrets-store-csi-driver-provider-azure-fips,...

CVE-2021-25940

In ArangoDB, versions v3.7.6 through v3.8.3 are vulnerable to Insufficient Session Expiration. When a user’s password is changed by the administrator, the session isn’t invalidated, allowing a malicious user to still be logged in and perform arbitrary actions within the system...

CVE-2021-25938

In ArangoDB, versions v2.2.6.2 through v3.7.10 are vulnerable to Cross-Site Scripting XSS, since there is no validation of the .zip file name and filtering of potential abusive characters which zip files can be named to. There is no X-Frame-Options Header set, which makes it more susceptible for...

BIT-ARANGODB-2021-25940 ArangoDB - Insufficient Session Expiration after Password Change

In ArangoDB, versions v3.7.6 through v3.8.3 are vulnerable to Insufficient Session Expiration. When a user’s password is changed by the administrator, the session isn’t invalidated, allowing a malicious user to still be logged in and perform arbitrary actions within the system...

Malicious code in arangodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3e09e7451852efa7e3e9deea5dc6dd6e2cf678f5368a741c35b2eac846fff21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1769 Malicious code in arangodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3e09e7451852efa7e3e9deea5dc6dd6e2cf678f5368a741c35b2eac846fff21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...