CVE-2025-62382

CVE-2025-62382 affects Frigate (network video recorder for IP cameras). Before v0.16.2, the export workflow lets an authenticated operator nominate any filesystem path as the thumbnail source for a video export. The chosen path is copied verbatim into the publicly served clips directory, enabling...

CVE-2025-61780 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, kube-fluentd-operator, ruby3.2-rack, ruby3.4-rack, ruby3.3-rack...

GHSA-R657-RXJC-J557 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, kube-fluentd-operator, ruby3.2-rack, ruby3.4-rack, ruby3.3-rack...

CVE-2025-61919 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, kube-fluentd-operator, ruby3.2-rack, ruby3.4-rack, ruby3.3-rack...

GHSA-6XW4-3V39-52MM vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, kube-fluentd-operator, ruby3.2-rack, ruby3.4-rack, ruby3.3-rack...

GHSA-R657-RXJC-J557 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rack, kube-fluentd-operator, gitlab-rails-ce, logstash, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack, ruby3.4-rails, ruby3.2-rails...

CVE-2025-61780 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rack, kube-fluentd-operator, gitlab-rails-ce, logstash, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack, ruby3.4-rails, ruby3.2-rails...

CVE-2025-61919 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rack, kube-fluentd-operator, gitlab-rails-ce, logstash, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack, ruby3.4-rails, ruby3.2-rails...

GHSA-6XW4-3V39-52MM vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rack, kube-fluentd-operator, gitlab-rails-ce, logstash, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack, ruby3.4-rails, ruby3.2-rails...

EUVD-2025-34516

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26861

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26861

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26861

CVE-2025-26861 affects RemoteCall Remote Support Program (for Operator). The vulnerability is an uncontrolled search path element (CWE-427) in versions prior to 5.3.0, which could allow arbitrary code execution if a crafted DLL is placed in the same folder as the affected product. Public sources ...

CVE-2025-26861

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

EUVD-2025-34515

RemoteCall Remote Support Program for Operator versions prior to 5.1.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26860

The CVE-2025-26860 entry concerns RemoteCall Remote Support Program (for Operator) prior to version 5.1.0. The vulnerability is an uncontrolled search path element (CWE-427) that can allow arbitrary code execution if a crafted DLL is placed in the application’s folder. Documents confirm the root ...

PT-2025-42232

RemoteCall Remote Support Program for Operator versions prior to 5.1.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

PT-2025-42233

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-62159

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

EUVD-2025-33793

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...