5816 matches found
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-31139
JetBrains TeamCity prior to 2025.03 exposes base64 encoded passwords in build logs (CVE-2025-31139). Affects JetBrains TeamCity (CI/CD server); vulnerability arises from passwords being logged in base64 form. Impact: potential credential exposure. Mitigation: upgrade to version 2025.03 or later o...
CVE-2025-31139: Insertion of Sensitive Information into Log File
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
DEBIAN-CVE-2025-27552
DBIx::Class::EncodedColumn use the rand function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032...
CVE-2025-27552
The DBIx::Class::EncodedColumn Perl module (versions until 0.00032 ) is vulnerable because it uses the non-cryptographically secure rand() function to salt password hashes within the Crypt/Eksblowfish/Bcrypt.pm file. This leads to insufficient entropy (CWE-331) and the use of cryptographically we...
SUSE CVE-2025-27553
Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT' promises that "an exception is thrown if the resolved file is not a descendent of the base file...
CVE-2025-27553
A flaw was found in Apache Commons VFS. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT' promises that "an exception is thrown if the resolved file is not a descendent of the base file". However, when the path contains...
Relative Path Traversal
Overview Affected versions of this package are vulnerable to Relative Path Traversal via the resolveFile method when the scope parameter is set to NameScope.DESCENDENT. An attacker can access files outside of the intended directory by including encoded directory traversal sequences such as %2E%2E...
DEBIAN-CVE-2025-27553
Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT' promises that "an exception is thrown if the resolved file is not a descendent of the base file...
CVE-2025-27553: Relative Path Traversal
Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT' promises that "an exception is thrown if the resolved file is not a descendent of the base file...
CVE-2025-30160
Redlib is an alternative private front-end to Reddit. A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service DOS condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restorepreferences form. This leads to excessive...
Open Redirect
Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Open Redirect. The validateurl function can be forced to follow a redirect to an unintended site if the URL is passed to the file parameter and...
Directory Traversal
Overview dbgpt is a DB-GPT is an experimental open-source project that uses localized GPT large models to interact with your data and environment. With this solution, you can beassured that there is no risk of data leakage, and your data is 100% private and secure. Affected versions of this packa...
CVE-2024-10190
Horovod CVE-2024-10190 affects v0.28.1 and earlier. The vulnerability is due to ElasticRendezvousHandler.do_PUT/_put_value decoding base64 data and ultimately calling cloudpickle.loads, enabling an unauthenticated attacker to supply a malicious pickle object via a PUT request and achieve arbitrar...
CVE-2024-10190
Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the "ElasticRendezvousHandler", a subclass of "KVStoreHandler". Specifically, the "putvalue" method in...
PT-2025-12206
Name of the Vulnerable Software and Affected Versions gradio-app/gradio affected versions not specified Description An open redirect issue exists, allowing an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application,...
Additional TCA Allows Cross-Site Scripting (XSS)
A cross-site scripting XSS vulnerability has been discovered in the Additional TCA extension. This vulnerabily is exploitable by a logged in backend user utilizing the TYPO3 backend user interface. This user can create output in the HTML context by exploiting improperly encoded user input. Update...
GHSA-RRH3-CGMX-W62F Additional TCA Allows Cross-Site Scripting (XSS)
A cross-site scripting XSS vulnerability has been discovered in the Additional TCA extension. This vulnerabily is exploitable by a logged in backend user utilizing the TYPO3 backend user interface. This user can create output in the HTML context by exploiting improperly encoded user input. Update...
