440 matches found
CVE-2026-46724: Improper Limitation of a Pathname to a Restricted Directory
The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...
CVE-2026-46723: Exposure of Resource to Wrong Sphere
The additionaltables configuration of the page and ttcontent indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index...
PT-2026-41863
The additional tables configuration of the page and tt content indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index...
openSUSE 16 Security Update : orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc (openSUSE-SU-2026:20193-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20193-1 advisory. Changes in orthanc: - dcmtk 370 breaks TW build - switch to lua 5.4 - patch out boost component system from framework - version 1.12.10 ' long...
OPENSUSE-SU-2026:20193-1 Security update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc
This update for orthanc, gdcm, orthanc-authorization, orthanc-dicomweb, orthanc-gdcm, orthanc-indexer, orthanc-mysql, orthanc-neuro, orthanc-postgresql, orthanc-python, orthanc-stl, orthanc-tcia, orthanc-wsi, python-pyorthanc fixes the following issues: Changes in orthanc: - dcmtk 370 breaks TW...
CVE-2016-10947
The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin...
Malicious code in bitcoin-indexer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c3f96c759562e2a831cfe8886f66f67c9793b45674fcf3a02082b0c658d37e The package bitcoin-indexer was found to contain malicious code...
MAL-2025-49575 Malicious code in bitcoin-indexer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c3f96c759562e2a831cfe8886f66f67c9793b45674fcf3a02082b0c658d37e The package bitcoin-indexer was found to contain malicious code...
EUVD-2025-38718
Malicious code in bitcoin-indexer npm...
EUVD-2020-2127
Malware in sbrugna...
EUVD-2020-2120
Malware in sbrugna...
EUVD-2020-2159
Malware in sbrugna...
EUVD-2008-6153
Malware in sbrugna...
EUVD-2006-1568
Malware in sbrugna...
EUVD-2020-2160
Malware in sbrugna...
EUVD-2016-1939
Malware in sbrugna...
EUVD-2020-2124
Malware in sbrugna...
EUVD-2020-2327
Malware in sbrugna...