502803 matches found
CVE-2026-72820 Grav 2.0.11 Path Traversal via Backup Profile Configuration
Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...
CVE-2026-72820
Grav prior to 2.0.13 is vulnerable to a backup profile path traversal issue. The root-path validation fails when a hard-coded deny-list is not applied, allowing attackers who have profile editor access to configure backup profiles with traversal paths that can archive or expose files from outside...
EUVD-2026-58634
Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...
CVE-2026-72820 Grav 2.0.11 Path Traversal via Backup Profile Configuration
Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...
CVE-2026-72820 Grav 2.0.11 Path Traversal via Backup Profile Configuration
Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...
Denial Of Service (DoS)
Micrometer is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of specially crafted HTTP requests, which allows an attacker to send malicious requests that consume excessive resources and cause the affected application to become unavailable...
SQL Injection
Spring Data Relational is vulnerable to SQL Injection. The vulnerability is due to insufficient escaping of wildcard characters in user-controlled input, which allows an attacker to inject wildcard patterns and perform boolean-based blind data inference...
Improper Validation Of User-Controlled Retry Header Value
Spring Kafka is vulnerable to improper validation of user-controlled retry header value. The vulnerability is due to insufficient validation of the retrytopic-attempts header, which allows an attacker to craft an out-of-range retry attempt count and cause the retry topic router to incorrectly...
Deserialization Of Untrusted Data
Spring Framework is vulnerable to deserialization of untrusted data. The vulnerability is due to MappingJackson2MessageConverter and JacksonJsonMessageConverter allowing arbitrary class instantiation from untrusted JMS messages, which allows an attacker to exploit gadget classes during...
RHSA-2026:54757 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
Bulletin has no description...
RHSA-2026:54667 Red Hat Security Advisory: freerdp security update
Bulletin has no description...
RHSA-2026:54666 Red Hat Security Advisory: yelp security update
Bulletin has no description...
RHSA-2026:54662 Red Hat Security Advisory: nghttp2 security update
Bulletin has no description...
RHSA-2026:54650 Red Hat Security Advisory: nghttp2 security update
Bulletin has no description...
RHSA-2026:54637 Red Hat Security Advisory: yelp security update
Bulletin has no description...
RHSA-2026:54624 Red Hat Security Advisory: yelp security update
Bulletin has no description...
RHSA-2026:54605 Red Hat Security Advisory: yelp security update
Bulletin has no description...
RHSA-2026:54554 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...