GO-2025-3793 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-5048 vulnerabilities

Vulnerabilities for packages: dapr...

GO-2026-4405 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2023-2069 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2068 vulnerabilities

Vulnerabilities for packages: croc...

GO-2026-4410 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2023-2071 vulnerabilities

Vulnerabilities for packages: croc...

GO-2026-5529 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2023-2070 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2072 vulnerabilities

Vulnerabilities for packages: croc...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cloud-sql-proxy, timescaledb-tune, aws-otel-collector, dgraph, containerd, cluster-api-helm-controller, nri-haproxy, steampipe, k3s, tekton-chains, nova, wgcf, harbor-cli, cis-operator, render-template, pluto, wire-go, conftest, nri-apache, dex,...

WordPress Prevent Direct Access - Protect WordPress Files plugin <= 2.8.8.8 - Unauthenticated Protected File Access vulnerability

WordPress Prevent Direct Access - Protect WordPress Files plugin = 2.8.8.8 - Unauthenticated Protected File Access vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Prevent Direct Access versions = 2.8.8.8...

CVE-2026-62663

A flaw was found in Banks. An attacker who can control template variables processed by Banks can exploit a path traversal vulnerability in the media filters image, audio, video, document. This allows the attacker to read arbitrary files on the system where Banks is running, such as sensitive...

WordPress WP Photo Album Plus plugin < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability

Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability discovered by Farid Narimanov in WordPress Plugin WP Photo Album Plus versions 9.2.09.002...

Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability (CVE-2026-11806)

Summary IBM WebSphere Application Server Liberty is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...

CVE-2026-73070

A flaw was found in Vim. The socket server backend accepts an unbounded number of client connections, causing file descriptors to overflow internal data structures. A local process able to connect to the server socket can exploit this to corrupt stack memory or terminate the Vim server. This can...

CVE-2026-73076

A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function. Mitigation Avoid installing or removing vimballs from untrusted sources. This vulnerability...

Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload

Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...