GHSA-44FP-W29J-9VJ5 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

GHSA-4PG4-QVPC-4Q3H vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-47290 vulnerabilities

Vulnerabilities for packages: docker-compose, neuvector-scanner...

GHSA-CM76-QM8V-3J95 vulnerabilities

Vulnerabilities for packages: docker-compose, neuvector-scanner...

CVE-2025-3580

An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint. The vulnerability can be exploited when: 1. An Organization administrator...

CVE-2025-48075 vulnerabilities

Vulnerabilities for packages: gatus...

GHSA-HG3G-GPHW-5HHM vulnerabilities

Vulnerabilities for packages: gatus...

CVE-2025-4949 vulnerabilities

Vulnerabilities for packages: sonarqube-10, apache-nifi-registry, apicurio-registry, wildfly, nextflow, gradle, thingsboard...

CVE-2025-48075 vulnerabilities

Vulnerabilities for packages: gatus...

GHSA-HG3G-GPHW-5HHM vulnerabilities

Vulnerabilities for packages: gatus...

GHSA-VRPQ-QP53-QV56 vulnerabilities

Vulnerabilities for packages: apicurio-registry, gradle, sonarqube-10, thingsboard, apache-nifi-registry, wildfly, nextflow...

GHSA-CM76-QM8V-3J95 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, docker-compose, neuvector-scanner, neuvector-fips, neuvector...

CVE-2024-23454

Apache Hadoop’s RunJar.run does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary directory is shared between all local user...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: melange, k3s, zot, wolfictl...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: zot, cg, wolfictl, melange, k3s...

CVE-2025-47291 vulnerabilities

Vulnerabilities for packages: zot, cg, wolfictl, melange, k3s...

CVE-2022-30984

A buffer overflow vulnerability in the Rubrik Backup Service RBS Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root privileges by sending a crafted message to the RBS agent...

CVE-2022-24725

Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home directory on Unix systems when using Bash with the escape or escapeAll functions from the shescape API with the interpolation option set to true. Other tested shells, Dash and Zs...

CVE-2022-29614

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on Unix systems,...

CVE-2021-36151

In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions = 0.15.0. Users should update to version 0.16.0 which addresses this issue...