65973 matches found
cve-analysis-lab
Vulnerability Research & CVE Analysis Lab Analyst: Harsha...
Insecure Trusted-Package Validation
Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...
GO-2024-2597 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2026-5746 vulnerabilities
Vulnerabilities for packages: rancher-agent, buildah, google-cloud-otel-ops-collector, k8sgpt, ko-fips, chainloop-control-plane-fips, spire-server, cloudbeat, nrdot-collector-k8s-fips, podman-fips, skopeo-fips, amazon-cloudwatch-agent-operator-fips, docker-fips, vault, trivy-fips,...
GO-2026-5668 vulnerabilities
Vulnerabilities for packages: ko, datadog-agent, buildah, trivy, rancher-agent, opentelemetry-operator, aws-otel-collector, zot, undock, osv-scanner, podman, amazon-cloudwatch-agent-operator, nerdctl, spire-server, grafana, kots, portieris, rancher, rancher-machine, k8sgpt, docker-credential-gcr,...
EUVD-2026-58552
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...
CVE-2026-19762
A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit h...
CVE-2026-19762
DTStack Taier 1.4.0 contains a path traversal vulnerability in the Chunk-Check Endpoint, specifically in Paths.ge within FileChunkController.java. Manipulating the argument Name allows traversal, and the attack can be launched remotely. The exploit has been published. Current documents do not pro...
CVE-2026-19762 DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal
A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit h...
EUVD-2026-58556
A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit h...
CVE-2026-19762 DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal
A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit h...
SAP NetWeaver AS ABAP Missing Authorization Check (3752864)
The version of SAP NetWeaver AS ABAP detected on the remote host is affected by a missing authorization check vulnerability as referenced in SAP Security Note 3752864: - SAP NetWeaver and ABAP Platform Change and Transport System - Customer Transport Integration Wizard allows a low-privileged use...
PT-2026-72043
Name of the Vulnerable Software and Affected Versions ZeroBrew versions prior to 0.3.2 Description A missing integrity verification in the Ruby compatibility shim allows network attackers to execute arbitrary code. By substituting malicious content at formula resource or URL-based patch URLs,...
The vulnerability of the Linux operating system’s kernel, related to copying buffers without checking the input data, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Oracle Linux 10 : .NET / 8.0 (ELSA-2026-54541)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54541 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 Tenable has extracted...
CVE-2026-19758 dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...
CVE-2026-19758
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...
CVE-2026-19758
CVE-2026-19758 affects dromara lamp-cloud up to version 5.10.0, specifically the chunk-check endpoint’s FileChunkController.java. The vulnerability enables path traversal by manipulating the Name argument and can be exploited remotely. Public exploit details exist (exploitation maturity: proof-of...
CVE-2026-19758 dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...