13163 matches found
CVE-2025-24216
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...
Directory Traversal
Overview aws-sam-cli is an AWS SAM CLI is a CLI tool for local development and testing of Serverless applications Affected versions of this package are vulnerable to Directory Traversal through the symlink handling process. After completing a build, the content of those symlinks is copied to the...
GHSA-PX37-JPQX-97Q9 AWS SAM CLI Path Traversal allows file copy to build container
Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. When running the AWS SAM CLI build process with Docker and symlinks are include...
@adhd/backlog (>=1.0.0, <=1.0.8), @adhd/react-hooks (2.2.1) +445 more potentially affected by CVE-2025-31125 via vite (>=5.0.0, <=5.4.15)
vite NPM version =5.0.0, =1.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =0.5.5 - @avorati/strapi-plugin-preview 1.0.1 - @beaker-tools/typescript-toolkit 1.3.0 - @beardeddudes/strapi-types 0.1.1 and more Source cves:...
@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +56 more potentially affected by CVE-2025-31125 via vite (>=6.0.0, <=6.0.11)
vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.38 and more Sour...
@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +41 more potentially affected by CVE-2025-31125 via vite (>=6.1.0, <=6.1.2)
vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...
CVE-2025-3048
CVE-2025-3048 concerns AWS SAM CLI. When building with Docker (--use-container) and symlinks are included, the content of those symlinks can be copied into the SAM CLI cache as regular files/directories, potentially exposing privileged host files to users within the local workspace. This affects ...
CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container
When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...
Exploit for CVE-2025-30208
ViteVulScan Vulnerabilities Overview This project involves...
CVE-2025-3048: UNIX Symbolic Link (Symlink) Following
After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...
PT-2025-55054
Уязвимость функции build insn модуля arch/loongarch/net/bpf jit.c поддержки архитектуры LoongArch ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-26869
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Build allows Stored XSS.This issue affects Build: from n/a through 1.0.3...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-31139
JetBrains TeamCity prior to 2025.03 exposes base64 encoded passwords in build logs (CVE-2025-31139). Affects JetBrains TeamCity (CI/CD server); vulnerability arises from passwords being logged in base64 form. Impact: potential credential exposure. Mitigation: upgrade to version 2025.03 or later o...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
JetBrains TeamCity 日志信息泄露漏洞
JetBrains TeamCity is a powerful continuous integration and continuous delivery CI/CD tool developed by JetBrains. JetBrains TeamCity suffers from an information disclosure vulnerability that stems from base64 encoded passwords being exposed in build logs. An attacker can exploit the vulnerabilit...