1248908 matches found
Important: Red Hat Security Advisory: osbuild-composer security update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...
CVE-2026-58437
A flaw was found in Gitea. This vulnerability allows an attacker to manipulate repository visibility settings by leveraging specific Git push options. This could lead to unauthorized disclosure of repository information or unintended access control changes. Mitigation Mitigation for this issue is...
CVE-2026-64963
A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...
GO-2026-4950 vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-73992
creationtimestamp| type| source ---|---|--- 2026-08-20 14:09:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgbzekj22e...
EUVD-2026-63374
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Estonian Information System Authority RIA DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0...
Azure Stack HCI Information Disclosure Vulnerability
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network...
Microsoft Word Information Disclosure Vulnerability
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Microsoft Copilot in Azure Information Disclosure Vulnerability
Server-side request forgery ssrf in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network...
Azure Data Factory Information Disclosure Vulnerability
Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
Microsoft Partner Center Information Disclosure Vulnerability
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network...
CVE-2026-64963
ATutor's path traversal flaw is exploitable only when the AT_FORCE_GET_FILE config option is enabled, allowing authenticated users to read files from other course directories. The product is no longer actively supported; version 2.2.4 was confirmed vulnerable with no fix available, so mitigation ...
CVE-2026-64963 Path Traversal in ATutor
A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...
CVE-2026-64963 Path Traversal in ATutor
A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...
EUVD-2026-63363
A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...
MINI-G9Q5-QXC8-HVW9
Bulletin has no description...
MINI-8Q57-963C-RXMQ
Bulletin has no description...
CVE-2026-66672
creationtimestamp| type| source ---|---|--- 2026-08-20 13:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjeo6vs4c2f 2026-08-20 14:08:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgawzwhx2y...
CVE-2026-76990 code-projects Simple Inventory System delete.php sql injection
A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public...