35299 matches found
GO-2026-5662 vulnerabilities
Vulnerabilities for packages: trillian, prometheus-pushgateway, minio-operator, karma, grafana-pyroscope, loki, minio, minio-object-browser, jaeger, tempo, splunk-otel-collector, telegraf, datadog-agent, mc, aws-otel-collector, mcp-grafana, cloud-sql-proxy, certificate-transparency, istio, keda...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: trillian, metrics-server, prometheus-pushgateway, minio-operator, karma, loki, minio, prometheus, amazon-cloudwatch-agent-operator, jaeger, tempo, splunk-otel-collector, datadog-agent, mc, aws-otel-collector, cloud-sql-proxy, certificate-transparency,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: kubernetes, crossplane-provider-aws-firehose, crossplane-provider-aws-s3, nri-couchbase, helm, pgpool2exporter, timoni, crossplane-provider-aws-cloudwatchlogs, harbor-scanner-trivy, harbor, litestream, glab, metrics-server, octo-sts, src, runc, croc, manifest-tool,...
GO-2026-6061 vulnerabilities
Vulnerabilities for packages: vault-env, manifest-tool, flyte, caddy, minio, flux-kustomize-controller, terragrunt, mc, verticadb-operator, rancher, vault-benchmark, k8sgpt-operator, knative-eventing, terraform-provider-aws, terraform-provider-azuread, neuvector-sigstore-interface, consul-k8s,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: kubernetes, crossplane-provider-aws-firehose, crossplane-provider-aws-s3, helm, scorecard, crossplane-provider-aws-cloudwatchlogs, glab, src, ko, syft, cloud-provider-aws, pulumi, chezmoi, mods, caddy, minio, crossplane-provider-aws-lambda, flux-kustomize-controller,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: timoni, crossplane-provider-aws-firehose, crossplane-provider-aws-s3, nri-couchbase, lazygit, pgpool2exporter, scorecard, crossplane-provider-aws-cloudwatchlogs, http-echo, litestream, octo-sts, src, custom-pod-autoscaler, croc, manifest-tool, opentofu, runc,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: ini-file, wire-go, src, ko, headlamp, caddy, kubernetes-csi-external-health-monitor, envconsul, ip-masq-agent, rabbitmq-default-user-credential-updater, terraform-mcp-server, kubernetes-dashboard-web, docker-cli, helm-operator, nova, aws-otel-collector, gobuster,...
GO-2025-3849 vulnerabilities
Vulnerabilities for packages: vault-env, harbor-scanner-trivy, http-echo, flyte, mods, caddy, minio, flux-kustomize-controller, supercronic, terragrunt, mc, verticadb-operator, sbom-scorecard, bazelisk, kubernetes-dashboard-api, terraform-provider-sendgrid, sftpgo-plugin-eventsearch, nri-cassandr...
EUVD-2026-58552
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...
EUVD-2026-58551
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
CVE-2026-19758
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...
CVE-2026-19757
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
EUVD-2026-58550
A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack...
VulnCheck KEV: CVE-2026-58231
SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...
CVE-2026-19758 dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...
CVE-2026-19758
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...
CVE-2026-19758 dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...
CVE-2026-19758
CVE-2026-19758 affects dromara lamp-cloud up to version 5.10.0, specifically the chunk-check endpoint’s FileChunkController.java. The vulnerability enables path traversal by manipulating the Name argument and can be exploited remotely. Public exploit details exist (exploitation maturity: proof-of...
CVE-2026-19756
A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack...
CVE-2026-19757
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...