org.apache.tomcat.embed:tomcat-embed-jasper (7.0.34), org.crazyyak.dev:yak-dev-demo (>=1.4.0, <=1.4.1) +6 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.34)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.34 -...

ch.ralscha:embeddedtc (>=0.0.6, <=0.0.8), com.intersult:testing-tomcat7 (1.0) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.27)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.ralscha:embeddedtc =0.0.6, =3.0.0.m3, =3.0.0.m4 Source cves: CVE-2026-435...

ch.ralscha:embeddedtc (>=0.0.6, <=0.0.8), com.intersult:testing-tomcat7 (1.0) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.27)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.ralscha:embeddedtc =0.0.6, =3.0.0.m3, =3.0.0.m4 Source cves: CVE-2026-435...

org.apache.tomcat:tomcat-catalina-ha (8.5.91), org.apache.tomcat:tomcat-catalina-ws (8.5.91) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.91)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.91 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.91 - org.apache.tomcat:tomcat-catalina-ws 8.5.91 -...

io.antmedia:ant-media-server (>=2.6.3, <=2.7.0), org.apache.tomcat:tomcat-catalina-ha (8.5.90) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.90)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.90 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - io.antmedia:ant-media-server =2.6.3, =2.7.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.90 -...

com.github.psi-probe:psi-probe-tomcat85 (3.5.7), org.apache.tomcat:tomcat-catalina-ha (8.5.75) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.75)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.7 - org.apache.tomcat:tomcat-catalina-ha 8.5.75 ...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-43512 Source advisory...

ch.ralscha:embeddedtc (>=0.0.6, <=0.0.8), com.intersult:testing-tomcat7 (1.0) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.27)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.ralscha:embeddedtc =0.0.6, =3.0.0.m3, =3.0.0.m4 Source cves: CVE-2026-435...

org.apache.tomcat:tomcat-catalina-ha (8.0.8), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.8) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.0.8)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.8 - org.apache.tomcat:tomcat-catalina-jmx-remote 8.0...

ch.rasc:embeddedtc (1.3), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.33) +1 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.33)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.3 - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.33 ...

CVE-2026-34187

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-34187

The CVE-2026-34187 vulnerability affects Pandora FMS, specifically versions 777 through 800. It is described as an improper neutralization of special elements used in an SQL command, enabling SQL Injection via a graph container parameter. According to the NVD metrics, the issue has a CVSS v3.1 ba...

CVE-2026-34187 SQL Injection in Graph Container Parameter

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...

CVE-2026-34187 SQL Injection in Graph Container Parameter

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...

ROS-20260512-73-0006

A vulnerability in Incus container management system and virtual machine manager is related to incorrect directory path name restriction. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands...

Pandora FMS SQL injection vulnerability

Pandora FMS is a monitoring system developed by the American company Pandora FMS. This system provides visual monitoring of networks, servers, virtual infrastructure, and applications. Versions 777 to 800 of Pandora FMS have a SQL injection vulnerability. This vulnerability arises from improper...

PT-2026-40067

Name of the Vulnerable Software and Affected Versions Pandora FMS versions 777 through 800 Description Improper neutralization of special elements used in an SQL command allows SQL Injection via the graph container parameter. SQL Injection is a technique where an attacker inserts malicious SQL co...

CVE-2026-34187: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800...

ROS-20260512-73-0007

A vulnerability in the Incus container management system and virtual machine manager is related to failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands...

CVE-2026-44218: Improper Privilege Management

ciguard is a static security auditor for CI/CD pipelines. From 0.1.0 to 0.8.1, the published ghcr.io/jo-jo98/ciguard container image inherits the default root user because the Dockerfile lacks a USER directive. This vulnerability is fixed in 0.8.2...