Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:30 p.m.•22 views

CVE-2026-42191

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...

7.8CVSS5.5AI score0.00148EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/12 8:16 p.m.•50 views

CVE-2026-42191

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...

7.8CVSS0.00148EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/12 7:12 p.m.•12 views

CVE-2026-42191

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...

6.5CVSS5.8AI score0.00148EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/12 7:12 p.m.•16 views

CVE-2026-42191 OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...

6.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/12 7:12 p.m.•51 views

CVE-2026-42191 OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP Exporter

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...

6.5CVSS0.00148EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/04/30 6:34 p.m.•158 views

OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter

Summary The OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but OTELDOTNETEXPERIMENTALOTLPDISKRETRYDIRECTORYPATH was not configured. The exporter stored and loaded .blob files under...

7.8CVSS5.8AI score0.00148EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/04/30 6:34 p.m.•84 views

GHSA-4625-4J76-FWW9 OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter

Summary The OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but OTELDOTNETEXPERIMENTALOTLPDISKRETRYDIRECTORYPATH was not configured. The exporter stored and loaded .blob files under...

6.5CVSS5.8AI score0.00148EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/30 12:00 a.m.•30 views

PT-2026-36819

Name of the Vulnerable Software and Affected Versions OpenTelemetry.Exporter.OpenTelemetryProtocol versions 1.8.0 through 1.15.2 Description The OTLP disk retry feature silently falls back to Path.GetTempPath when OTEL DOTNET EXPERIMENTAL OTLP RETRY is set to disk but OTEL DOTNET EXPERIMENTAL OTL...

7.8CVSS5.8AI score0.00148EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-21203

Malware in sbrugna...

4.3CVSS4.9AI score0.03675EPSS
SaveExploits0References2
NVD
NVD
•added 2021/06/18 12:15 a.m.•39 views

CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

4.3CVSS0.03675EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/06/17 11:41 p.m.•42 views

CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

4.7AI score0.03675EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/06/17 12:00 a.m.•14 views

Sonatype Nexus Repository Manager 路径遍历漏洞

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A path traversal vulnerability in Sonatype Nexus Repository Manager version 3.x prior to 3.31.0 allows remote authenticated attacke...

4.3CVSS5.2AI score0.03675EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/17 12:00 a.m.•3 views

CVE-2021-34553: Improper Limitation of a Pathname to a Restricted Directory

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

4.3CVSS5.9AI score0.03675EPSS
SaveExploits0References2
Rows per page
Query Builder