1234 matches found
PT-2026-53115
Name of the Vulnerable Software and Affected Versions code-projects Project Management System version 1.0 Description Cross site scripting XSS occurs in the Mail Compose Page component within the /mail.php endpoint. This issue allows a remote attacker to execute malicious scripts through the...
CVE-2026-13504: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: argo-workflows, ksops, crossplane-provider-aws-osis, crossplane-provider-aws-sns-fips, coder-fips, zarf-fips, crossplane-provider-aws-elbv2, istio, crossplane-provider-aws-backup-fips, kyverno-fips, crossplane-provider-aws-ram-fips, docker-compose, omnictl-multiarch,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: argo-workflows, ksops, crossplane-provider-aws-osis, crossplane-provider-aws-sns-fips, coder-fips, zarf-fips, crossplane-provider-aws-elbv2, istio, crossplane-provider-aws-backup-fips, kyverno-fips, crossplane-provider-aws-ram-fips, docker-compose, omnictl-multiarch,...
GO-2026-5340 Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) in github.com/getarcaneapp/arcane/backend
Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content incl. .env secrets in github.com/getarcaneapp/arcane/backend...
GO-2026-5308 Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend
Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend...
CVE-2026-53492 vulnerabilities
Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...
CVE-2026-53489 vulnerabilities
Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...
GHSA-CVXM-645Q-P574 vulnerabilities
Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...
GHSA-33VJ-92QQ-66HC vulnerabilities
Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...
CVE-2026-50195 vulnerabilities
Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...
GHSA-JPCC-P29G-P8MQ vulnerabilities
Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescape,...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescape,...
AVideo Vulnerable to Unauthenticated .env File Exposure via Official Docker Compose Configuration
Vulnerability Details CWE: CWE-538 - Insertion of Sensitive Information into Externally-Accessible File or Directory The official docker-compose.yml line 61 mounts the entire project root directory as the Apache document root: yaml volumes: - "./:/var/www/html/AVideo" This causes the .env file —...
GHSA-WF69-R4MX-43RR AVideo Vulnerable to Unauthenticated .env File Exposure via Official Docker Compose Configuration
Vulnerability Details CWE: CWE-538 - Insertion of Sensitive Information into Externally-Accessible File or Directory The official docker-compose.yml line 61 mounts the entire project root directory as the Apache document root: yaml volumes: - "./:/var/www/html/AVideo" This causes the .env file —...
Files or Directories Accessible to External Parties
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the official Docker Compose configuration, which mounts the project root directory as the Apache document...
PT-2026-51433
Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description AVideo exposes sensitive .env files to unauthenticated users when deployed using the official Docker compose configuration. The docker-compose.yml file mounts the entire project root directory as the...
CVE-2026-21768
The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...
CVE-2026-21768 HCL Verse for Android is susceptible to an injection vulnerability
The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...
CVE-2026-21768
The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...