net.oneandone.cosmo:cosmo-core (>=1.0.10-rc, <=1.0.29), us.fatehi:schemacrawler-mariadb (14.07.06) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - net.oneandone.cosmo:cosmo-core =1.0.10-rc, =1.0.29 - us.fatehi:schemacrawler-mariadb...

net.oneandone.cosmo:cosmo-core (>=1.0.10-rc, <=1.0.29), us.fatehi:schemacrawler-mariadb (14.07.06) potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.3.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - net.oneandone.cosmo:cosmo-core =1.0.10-rc, =1.0.29 - us.fatehi:schemacrawler-mariadb...

net.oneandone.cosmo:cosmo-core (>=1.0.10-rc, <=1.0.29), us.fatehi:schemacrawler-mariadb (14.07.06) potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.3.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - net.oneandone.cosmo:cosmo-core =1.0.10-rc, =1.0.29 - us.fatehi:schemacrawler-mariadb...

net.oneandone.cosmo:cosmo-core (>=1.0.10-rc, <=1.0.29), us.fatehi:schemacrawler-mariadb (14.07.06) potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.3.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - net.oneandone.cosmo:cosmo-core =1.0.10-rc, =1.0.29 - us.fatehi:schemacrawler-mariadb...

GO-2026-5774 vulnerabilities

Vulnerabilities for packages: commercial-kyverno, telegraf, fluxcd-kustomize-mutating-webhook, kyverno, karma-fips, karma, cosmo-router-fips, cosmo-router, zitadel, fluxcd-kustomize-mutating-webhook-fips...

GO-2026-5775 vulnerabilities

Vulnerabilities for packages: commercial-kyverno, telegraf, fluxcd-kustomize-mutating-webhook, kyverno, karma-fips, karma, cosmo-router-fips, cosmo-router, zitadel, fluxcd-kustomize-mutating-webhook-fips...

GO-2026-5777 vulnerabilities

Vulnerabilities for packages: commercial-kyverno, telegraf, fluxcd-kustomize-mutating-webhook, kyverno, karma-fips, karma, cosmo-router-fips, cosmo-router, zitadel, fluxcd-kustomize-mutating-webhook-fips...

CVE-2018-10429

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php...

Malicious Package

Overview wundergraph-cosmo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2018-2501

Malware in sbrugna...

EUVD-2012-5738

Malware in sbrugna...

Malicious code in wundergraph-cosmo (npm)

--- -= Per source details. Do not edit below this line.=-...

cosmo-koki.co.jp Cross Site Scripting vulnerability OBB-3439732

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cosmo Arbitrary PHP Code Execution Vulnerability

Cosmo is a set of CMS Content Management System built on AngularJS and PHP. A security vulnerability exists in Cosmo version 1.0.0Beta6. The vulnerability can be exploited to execute arbitrary PHP code via the Database Prefix field in the Database Info screen on the localhost/Cosmo/install.php li...

CVE-2018-10429

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php...

Code injection

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php...

CVE-2018-10429

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php...

CVE-2018-10429

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php...

CVE-2018-10429

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php...

CVE-2018-10429

Cosmo CMS 1.0.0Beta6 is affected by CVE-2018-10429. The vulnerability allows an attacker to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php. This is evidenced by multiple connected records (Red Hat, CNVD, NVD, OSV, CVE listings) describing the s...