418 matches found
CVE-2026-65017
Apache Airflow CVE-2026-65017 affects the Config API in multi-team deployments. An authenticated Viewer with only configuration-read access could read a team-scoped Celery broker URL (including embedded credentials) in cleartext because the secrets masker did not normalize team-prefixed sections ...
CVE-2026-65017
Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an administrator has enabled multi-team mode and exposed the Config API, an authenticated Viewer holding only configuration-read access — with no prior access to the secret — could...
CVE-2026-65017 Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)
Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an administrator has enabled multi-team mode and exposed the Config API, an authenticated Viewer holding only configuration-read access — with no prior access to the secret — could...
EUVD-2026-57272
Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an administrator has enabled multi-team mode and exposed the Config API, an authenticated Viewer holding only configuration-read access — with no prior access to the secret — could...
Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion
Joomla! Jtag Members Directory 5.3.7 is vulnerable to local file inclusion via the downloadfile parameter. id: CVE-2018-6008 info: name: Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion author: daffainfo severity: high description: Joomla! Jtag Members Directory 5.3.7 is vulnerable to...
CVE-2021-22749
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially...
CVE-2021-22728
A CWE-200: Information Exposure vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could cause disclosure of encrypte...
CVE-2020-7506
A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure...
EUVD-2020-28631
Malware in sbrugna...
EUVD-2023-26747
Malicious code in bioql PyPI...
EUVD-2021-9918
Malicious code in bioql PyPI...
EUVD-2024-39139
Malicious code in bioql PyPI...
EUVD-2024-39145
Malicious code in bioql PyPI...
EUVD-2021-9921
Malicious code in bioql PyPI...
EUVD-2023-51727
Malicious code in bioql PyPI...
EUVD-2021-9905
Malicious code in bioql PyPI...
EUVD-2021-9960
Malicious code in bioql PyPI...
EUVD-2024-42544
Malicious code in bioql PyPI...