5158 matches found
Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal
Windmill 1.603.3 contains a path traversal caused by unsanitized filename parameter in getlogfile endpoint, letting unauthenticated attackers read arbitrary files on the server, exploit requires no authentication. id: CVE-2026-29059 info: name: Windmill/Nextcloud Flow 1.603.3 - Unauthenticated Pa...
GHSA-PCW8-M77R-2528 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-PCW8-M77R-2528 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: authentik-fips, semaphore, authentik, jitsucom-jitsu, pelias-api, unleash-fips, langfuse, keep, langfuse-fips, nextcloud-server, cadence-web, librechat, unleash, vitess, arangodb, homepage, keep-fips...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu, vitess, nextcloud-server...
GHSA-55Q2-FJHQ-7XH7 vulnerabilities
Vulnerabilities for packages: langfuse, nextcloud-server...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: prism, wazuh-dashboard, semaphore, jitsucom-jitsu, redisinsight, kubeflow-centraldashboard, langfuse, langfuse-fips, nextcloud-server, opensearch-dashboards, librechat, lerna, awx, wazuh-dashboard-fips, kibana, opensearch-dashboards-fips...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: prism, wazuh-dashboard, semaphore, jitsucom-jitsu, redisinsight, kubeflow-centraldashboard, langfuse, langfuse-fips, nextcloud-server, opensearch-dashboards, librechat, lerna, awx, wazuh-dashboard-fips, kibana, opensearch-dashboards-fips...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse, jitsucom-jitsu, prism, lerna, nextcloud-server, kubeflow-centraldashboard...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse, jitsucom-jitsu, prism, lerna, nextcloud-server, kubeflow-centraldashboard...
CVE-2026-69153 vulnerabilities
Vulnerabilities for packages: authentik-fips, renovate, kubeflow-pipelines, semaphore, authentik, pelias-api, langfuse, keep, langfuse-fips, saf, nextcloud-server, cadence-web, vitess, arangodb, keep-fips...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: authentik-fips, renovate, kubeflow-pipelines, semaphore, authentik, pelias-api, langfuse, keep, langfuse-fips, saf, nextcloud-server, cadence-web, vitess, arangodb, keep-fips...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: langfuse, saf, kubeflow-pipelines, vitess, nextcloud-server, renovate...
CVE-2026-69153 vulnerabilities
Vulnerabilities for packages: langfuse, saf, kubeflow-pipelines, vitess, nextcloud-server, renovate...
GHSA-3FVR-2JW6-CRQ4 vulnerabilities
Vulnerabilities for packages: nextcloud-server, privatebin, drupal...
GHSA-32RQ-JHR7-M3HH vulnerabilities
Vulnerabilities for packages: nextcloud-server, privatebin, drupal...
CVE-2026-67355 vulnerabilities
Vulnerabilities for packages: nextcloud-server, privatebin, drupal...
CVE-2026-67339 vulnerabilities
Vulnerabilities for packages: nextcloud-server, privatebin, drupal...