CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

CVE-2025-11240

An open redirect vulnerability existed in KNIME Business Hub prior to version 1.16.0. An unauthenticated remote attacker could craft a link to a legitimate KNIME Business Hub installation which, when opened by the user, redirects the user to a page of the attackers choice. This might open the...

EUVD-2025-32110

Malicious code in bioql PyPI...

PT-2025-40343

Name of the Vulnerable Software and Affected Versions KNIME Business Hub versions prior to 1.16.0 Description Potentially sensitive information within jobs on KNIME Business Hub was accessible to all team members. From version 1.16.0 onwards, only job metadata is visible to team members, with ful...

DEBIAN-CVE-2019-11250

The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components such as kube-apiserver prior to v1.16.0, which make use of basic or bearer token authentication, and run ...

Artifex Software MuPDF Buffer Overflow Vulnerability (CNVD-2020-54480)

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A buffer error vulnerability exists in the 'fzchartorune' function of the fitz/string.c file in Artifex Software MuPDF versions prior to 1.16.0. The vulnerability stems from a networked system or product performi...

CloudBees Jenkins CI Build Failure Analyzer plugin cross-site scripting vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is a set of Java-based development of continuous integration tools , which is mainly used to monitor the continuous software version release/testing projects and some timed tasks.Jenkins CI Build Failure Analyzer is one of the a plugin for...