21827 matches found
CVE-2026-45131
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...
CVE-2026-42296
A flaw was found in Argo Workflows. A user with create Workflow permission can bypass the templateReferencing: Strict security control. This bypass allows the user to gain host network access, switch service accounts, override pod security context, add tolerations to schedule on control-plane...
CVE-2026-44586
SiYuan is an open-source personal knowledge management system. From 2.1.12 to before 3.7.0. SiYuan's Bazaar marketplace renders package author metadata from the public bazaar stage feed into HTML without escaping. In the desktop app this becomes stored XSS, and because SiYuan's Electron windows a...
MINI-3CHG-9PJ3-4R3M
Bulletin has no description...
MINI-HRR7-78XQ-83MQ
Bulletin has no description...
MINI-87GM-37XR-PCQW
Bulletin has no description...
MINI-G2CQ-WQG6-H43C
Bulletin has no description...
CVE-2026-50234
Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory...
CVE-2026-50234 Lyrion Music Server 9.2.0 Path Traversal File Read
Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory...
CVE-2026-50234
Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory...
CVE-2026-50234
Affected product: Lyrion Music Server 9.2.0. Vulnerability: Path traversal in the web server context allowing unauthenticated attackers to read arbitrary files by manipulating file path parameters. Root cause / vector: Directory traversal outside the intended directory structure. Impact: Confiden...
MINI-P6GP-2J9G-5GVG
Bulletin has no description...
MINI-JGX5-G2JQ-8MFP
Bulletin has no description...
MINI-WJ5X-P6M5-F54H
Bulletin has no description...
MINI-6FQ9-5G36-724H
Bulletin has no description...
MINI-MH3V-GH53-56XV
Bulletin has no description...
MINI-5XGQ-8WHJ-CFXX
Bulletin has no description...
MINI-G4RM-7FRQ-RPW2
Bulletin has no description...