Lucene search
+L

1023 matches found

OSV
OSV
added 2025/06/20 1:28 p.m.7 views

GHSA-7CJH-XX4R-QH3F sentry-android unmasked sensitive data in Android Session Replays for users of Jetpack Compose 1.8+

Impact Under specific circumstances, text composables may contain unmasked sensitive data in Android session replays. You may be impacted if you meet the following conditions: - Using any sentry-android with versions = 1.8.0-alpha08 - This includes any alpha, beta, release candidate, or general...

8.2CVSS6.5AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/06/20 1:28 p.m.33 views

sentry-android unmasked sensitive data in Android Session Replays for users of Jetpack Compose 1.8+

Impact Under specific circumstances, text composables may contain unmasked sensitive data in Android session replays. You may be impacted if you meet the following conditions: - Using any sentry-android with versions = 1.8.0-alpha08 - This includes any alpha, beta, release candidate, or general...

6.5AI score
SaveExploits0References6Affected Software2
Positive Technologies
Positive Technologies
added 2025/06/20 12:0 a.m.7 views

PT-2025-27499 · Maven · Io.Sentry:Sentry-Android +1

Impact Under specific circumstances, text composables may contain unmasked sensitive data in Android session replays. You may be impacted if you meet the following conditions: - Using any sentry-android with versions = 1.8.0-alpha08 - This includes any alpha, beta, release candidate, or general...

8.2CVSS6.6AI score
SaveExploits0References7
CNNVD
CNNVD
added 2025/06/16 12:0 a.m.6 views

szluyu99 gin-vue-blog 安全漏洞

szluyu99 gin-vue-blog is a Golang full-stack blog by Zhenyu personal developer, supporting Docker Compose one-click deployment. Based on the latest front-end and back-end technology stack Vue3, TS, Unocs, Redis and so on. The front-end contains a blog post display front , blog background manageme...

6.9CVSS5.7AI score0.00356EPSS
SaveExploits0References5
OSV
OSV
added 2025/06/10 11:31 a.m.3 views

SUSE-SU-2025:20385-1 Security update for docker-compose

This update for docker-compose fixes the following issues: Update to version 2.33.1: Improvements - Add support for gwpriority, enableipv4 requires docker v28.0 by @thaJeztah in 12570 Fixes - Run watch standalone if menu fails to start by @ndeloof in 12536 - Report error using non-file...

7.5CVSS6.9AI score0.01592EPSS
SaveExploits0References3
Wolfi
Wolfi
added 2025/05/23 7:47 p.m.22 views

CVE-2025-47290 vulnerabilities

Vulnerabilities for packages: docker-compose, neuvector-scanner...

9.4CVSS7.7AI score0.00456EPSS
SaveExploits0
Wolfi
Wolfi
added 2025/05/23 7:47 p.m.17 views

GHSA-CM76-QM8V-3J95 vulnerabilities

Vulnerabilities for packages: docker-compose, neuvector-scanner...

5.4AI score
SaveExploits0
Chainguard
Chainguard
added 2025/05/23 1:16 p.m.30 views

CVE-2025-47290 vulnerabilities

Vulnerabilities for packages: neuvector, neuvector-scanner, neuvector-fips, docker-compose-fips, docker-compose...

9.4CVSS8.3AI score0.00456EPSS
SaveExploits0
Chainguard
Chainguard
added 2025/05/23 1:16 p.m.18 views

GHSA-CM76-QM8V-3J95 vulnerabilities

Vulnerabilities for packages: neuvector, neuvector-scanner, neuvector-fips, docker-compose-fips, docker-compose...

5.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:3 a.m.10 views

CVE-2023-37273

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing docker compose run auto-gpt in the repo root uses a different docker-compose.yml file from the one suggested i...

8.8CVSS7.3AI score0.00358EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:24 p.m.9 views

CVE-2020-11710

An issue was discovered in docker-kong for Kong through 2.0.3. The admin API port may be accessible on interfaces other than 127.0.0.1. NOTE: The vendor argue that this CVE is not a vulnerability because it has an inaccurate bug scope and patch links. “1 Inaccurate Bug Scope - The issue scope was...

9.8CVSS8.9AI score0.33127EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:49 p.m.9 views

CVE-2020-7606

docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'execserviceName, cmd, fnStdout, fnStderr, fnExit' uses the variable 'serviceName' which can be controlled by users without any sanitization...

9.8CVSS7.1AI score0.0271EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:0 a.m.7 views

Azure Linux 3.0 Security Update: cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device-plugin (CVE-2025-22872)

The version of cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device- plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22872 advisory. - The...

6.5CVSS7.3AI score0.00513EPSS
SaveExploits0References2
CBLMariner
CBLMariner
added 2025/05/05 9:13 p.m.9 views

CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5

CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5. A patched version of the package is available...

6.5CVSS6.8AI score0.00513EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/05/04 2:42 p.m.320 views

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 !imagehttps://github.com/user-attachments/ass...

10CVSS9.3AI score0.99654EPSS
SaveExploits31
Snyk
Snyk
added 2025/05/01 6:28 a.m.2 views

Incorrect Default Permissions

Overview docksible is a Deploy and set up Docker Compose based web apps with Ansible Affected versions of this package are vulnerable to Incorrect Default Permissions via the file permissions of docker-compose files. An attacker could gain unauthorized access to sensitive configuration data or...

6.9CVSS6.9AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/04/18 11:3 a.m.467 views

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813-vulhub POC script for the vulhub environment of...

9.8CVSS7.4AI score0.99925EPSS
SaveExploits47
RedhatCVE
RedhatCVE
added 2025/04/18 2:11 a.m.25 views

CVE-2025-26153

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...

5.4CVSS6AI score0.00322EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/16 9:15 p.m.13 views

CVE-2025-26153

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...

5.4CVSS0.00322EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/16 6:16 p.m.8 views

AZL-60557 CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

6.5CVSS6.6AI score0.00513EPSS
SaveExploits0References1
Rows per page
Query Builder