72635 matches found
CGA-MQQ4-FQW4-4WQC
Bulletin has no description...
MINI-HPCC-7GRH-J32X
Bulletin has no description...
MINI-396R-XM56-4JMX
Bulletin has no description...
MINI-56F2-GF53-C692
Bulletin has no description...
EUVD-2026-70063
Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...
CVE-2026-84702
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
EUVD-2026-69793
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
CVE-2026-84702
facefusion through 3.6.1 is vulnerable to a path traversal flaw in the get_job_file_name function (located in facefusion/jobs/job_manager.py), which fails to normalize job identifiers. An attacker can supply traversal sequences in the job identifier parameter via the unauthenticated HTTP API to w...
CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...
CVE-2022-39197
CVE-2022-39197 CVE-2022-39197 "ID": "CVE-2022-39197", "STATE": "RESERVED"...
GHSA-VCC3-GHJQ-M6FR vulnerabilities
Vulnerabilities for packages: dotstatsuite-supercore, wazuh-dashboard-fips, kubeflow-pipelines, sqlpad, gitlab-rails-ce, vitess, nextcloud-server, kibana, opensearch-dashboards-fips, opensearch-dashboards, gitlab-rails-ce-fips...
EUVD-2026-69250
DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of "unsafe base types", and its isSafeSubType method returns true...
CLEANSTART-2026-JJ72716 Security fixes in kubernetes-event-exporter 1.6.1-r1
Package kubernetes-event-exporter version 1.6.1-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
CLEANSTART-2026-RU71621 Security fixes in grafana 12.4.7-r1
Package grafana version 12.4.7-r1 fixes 10 vulnerabilities: ghsa-r277-6w6q-xmqw, ghsa-jpcw-4wr7-c3vq, ghsa-gcjh-h69q-9w9g, CVE-2026-21728, CVE-2026-28377...
MINI-V4W6-R46G-FCR3
Bulletin has no description...
MINI-52JM-42FP-V64P
Bulletin has no description...