7807 matches found
CVE-2025-65963
Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has bee...
CVE-2021-4472: External Control of File Name or Path
The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content...
openstack mistral-dashboard 安全漏洞
OpenStack Mistral-Dashboard is an OpenStack open source GUI plugin. A security vulnerability exists in openstack mistral-dashboard, which stems from a local file inclusion vulnerability in the Create Workbook feature that could lead to the disclosure of the contents of arbitrary local files...
PT-2025-48173
Name of the Vulnerable Software and Affected Versions mistral-dashboard plugin for openstack affected versions not specified Description The mistral-dashboard plugin for openstack contains a local file inclusion issue within the 'Create Workbook' feature. This could lead to the disclosure of...
CVE-2025-65963 CFiles Unauthorized Folder/ZIP Access in Public Spaces
Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has bee...
EUVD-2025-199664
Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has bee...
[SECURITY] Fedora 42 Update: buildah-1.42.1-1.fc42
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
Malicious code in create-silgi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1bd1ddfab5f3ea6caf4f09a93f2ef08f7298e2d68892949e0a6f2975cd1b78 The package create-silgi was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199370
Malicious code in create-silgi npm...
EUVD-2025-199168
Malicious code in create-director-app npm...
MAL-2025-191082 Malicious code in create-director-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b99ae491d4f679e88d87285e36727c75273f7aa0bcacaa8f435d799bb332b The package create-director-app was found to contain malicious code. Source: ghsa-malware...
Malicious code in create-director-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b99ae491d4f679e88d87285e36727c75273f7aa0bcacaa8f435d799bb332b The package create-director-app was found to contain malicious code. Source: ghsa-malware...
Malicious code in create-mcp-use-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198905
Malicious code in create-mcp-use-app npm...
MAL-2025-190922 Malicious code in create-mcp-use-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in create-hardhat3-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1dad1ef411b38a2b87787581837e9c9f5a26fff790d14057d04ca67c06ddc The package create-hardhat3-app was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198838
Malicious code in create-hardhat3-app npm...
MAL-2025-190839 Malicious code in create-hardhat3-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1dad1ef411b38a2b87787581837e9c9f5a26fff790d14057d04ca67c06ddc The package create-hardhat3-app was found to contain malicious code. Source: ghsa-malware...