example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-33264 via apache-airflow (2.1.0)

apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-33264 Source advisory: OSV:PYSEC-2026-2082...

XDECAF: An Extensible Data Flow Diagram Analysis Framework for Information Security

xDECAF is an extensible tool for architecture-based data flow analysis with a focus on information security. It combines an extended data flow diagram metamodel of labeled flows and nodes, a domain-specific constraint language with different flow operations, and a browser-based editor backed by a...

example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2026-49297 via apache-airflow-providers-google (4.0.0)

apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2026-49297 Source advisory:...

example-pkg-naturalett (>=14.4.4, <=14.4.8) potentially affected by CVE-2026-49297 via apache-airflow-providers-google (4.0.0)

apache-airflow-providers-google PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - example-pkg-naturalett =14.4.4, =14.4.8 Source cves: CVE-2026-49297 Source advisory:...

org.apache.iotdb:customize-mqtt-example (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta) +6 more potentially affected by CVE-2026-24012 via org.apache.iotdb:iotdb-server (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-server MAVEN version =1.3.3, =1.3.3, =1.3.3, =1.3.3, =1.3.3, =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta - org.apache.iotdb:udf-example 1.3.3 Source cves: CVE-2026-24012 Source advisory: SNYK:JAVA-ORGAPACHEIOTDB-17821215...

org.apache.iotdb:customize-mqtt-example (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta) +6 more potentially affected by CVE-2026-24012 via org.apache.iotdb:iotdb-server (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-server MAVEN version =1.3.3, =1.3.3, =1.3.3, =1.3.3, =1.3.3, =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta - org.apache.iotdb:udf-example 1.3.3 Source cves: CVE-2026-24012 Source advisory: MEND:CVE-2026-24012...

PYSEC-2026-773 Remote code execution in Apache Airflow Docker's Provider

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to authenticated remote code exploit of code on the Airflow worker host. Disable loading of example DAGs or upgrade apache-airflow-providers-docker to 3.0.0 or above...

Remote code execution in Apache Airflow Docker's Provider

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to authenticated remote code exploit of code on the Airflow worker host. Disable loading of example DAGs or upgrade apache-airflow-providers-docker to 3.0.0 or above...

OpenStack Nova uses insecure keystone middleware tmpdir by default

keystone/middleware/authtoken.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova...

KNX visualisering - Broken Access Control

Exploit Title: KNX visualisering - Broken Access Control Date: 6/10/2026 Exploit Author: parsa rezaie khiabanloo Vendor Homepage: KNX visualisering https:/www.knxgroep.nl Version: KNX visualisering Tested on: Windows/Linux Step 1 : Attacker can using these dorks then can find the KNX panel . Shod...

Exploit for CVE-2026-14628

Path Traversal Demo - Case Study : CVE-2026-14628 A minimal,...

PYSEC-2026-626 Cross-site scripting in Contentful

Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-49877 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-50734 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-53917 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-52760 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (1.3.0) +2 more potentially affected by CVE-2026-53916 via org.apache.activemq:apache-activemq (5.0.0)

org.apache.activemq:apache-activemq MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:apache-activemq and may be impacted: - org.apache.axis2:axis2-integration 1.4 - org.apache.camel:camel-example-cxf 1.3.0 -...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (>=1.2.0, <=1.3.0) +3 more potentially affected by CVE-2026-49434 via org.apache.activemq:apache-activemq (>=4.1.1, <=5.0.0)

org.apache.activemq:apache-activemq MAVEN version =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring 1.2.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2026-49434 Source advisory: MEND:CVE-2026-49434...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (>=1.2.0, <=1.3.0) +3 more potentially affected by CVE-2026-49877 via org.apache.activemq:apache-activemq (>=4.1.1, <=5.0.0)

org.apache.activemq:apache-activemq MAVEN version =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring 1.2.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2026-49877 Source advisory: MEND:CVE-2026-49877...

org.apache.axis2:axis2-integration (1.4), org.apache.camel:camel-example-cxf (>=1.2.0, <=1.3.0) +3 more potentially affected by CVE-2026-50734 via org.apache.activemq:apache-activemq (>=4.1.1, <=5.0.0)

org.apache.activemq:apache-activemq MAVEN version =4.1.1, =1.2.0, =1.1.0, =1.3.0 - org.apache.camel:camel-example-spring 1.2.0 - org.apache.camel:camel-example-spring-xquery 1.3.0 Source cves: CVE-2026-50734 Source advisory: MEND:CVE-2026-50734...