65123 matches found
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: tetragon, tekton-chains, redis-operator, helm-operator, newrelic-nri-statsd, cerbos, neuvector-dbgen, kyverno, cue, rabbitmq-messaging-topology-operator, influx, portieris, sonobuoy, timoni, cis-operator, crossplane-provider-aws-ec2, sbom-convert, step-issuer,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: tetragon, tekton-chains, redis-operator, helm-operator, newrelic-nri-statsd, cerbos, neuvector-dbgen, kyverno, cue, rabbitmq-messaging-topology-operator, influx, portieris, sonobuoy, timoni, cis-operator, crossplane-provider-aws-ec2, sbom-convert, step-issuer,...
EUVD-2026-41135
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"...
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI ObjectFactory implementation com.mchange.v2.naming.JavaBeanObjectFactory willing to construct objects of arbitrary classes and initialize "JavaBean"-style properties. There are classes for which this kind of initialization is...
GHSA-H84G-69H7-MW6V mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI ObjectFactory implementation com.mchange.v2.naming.JavaBeanObjectFactory willing to construct objects of arbitrary classes and initialize "JavaBean"-style properties. There are classes for which this kind of initialization is...
SUSE-SU-2026:3623-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk fixes the following issues: Security issues fixed: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize bsc1272459. - CVE-2026-46968: unauthorized creation, deletion or modification access to critical data bsc127222...
Directory Traversal
Overview ch.qos.logback:logback-classic is a reliable, generic, fast and flexible logging library for Java. Affected versions of this package are vulnerable to Directory Traversal in MDCBasedDiscriminator, used by SiftingAppender, which takes an MDC value as the discriminating key without removin...
CVE-2026-19880
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...
DEBIAN-CVE-2026-19880
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...
CVE-2026-19880
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...
UBUNTU-CVE-2026-19880
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...
CVE-2026-19880
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...
CVE-2026-19880
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...
EUVD-2026-58667
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...
EUVD-2026-58660
A security flaw has been discovered in 648540858 wvp-GB28181-pro 2.7.4-20260107. This vulnerability affects unknown code of the file LogController.java of the component Log File Download Endpoint. The manipulation of the argument fileName results in path traversal. The attack may be launched...
GO-2023-1765 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, aactl...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: pulumi-language-yaml, kargo, xeol, pulumi-kubernetes-operator, argo-workflows, argo-events, skaffold, osv-scanner, kots, flux-image-automation-controller, kubevela, gitsign, cerbos, scorecard, steampipe, trivy, zot, rancher-fleet, gitea, flux, pulumi, apko, truffleho...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: pulumi-language-yaml, kargo, k8sgpt, pulumi-kubernetes-operator, argo-workflows, argo-events, skaffold, osv-scanner, kots, goreleaser, flux-image-automation-controller, kubevela, gitsign, scorecard, trivy, zot, flux-kustomize-controller, task, gitea, flux, pulumi,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: pulumi-language-yaml, kargo, k8sgpt, pulumi-kubernetes-operator, argo-workflows, argo-events, skaffold, osv-scanner, kots, goreleaser, flux-image-automation-controller, kubevela, gitsign, scorecard, trivy, zot, flux-kustomize-controller, task, gitea, flux, pulumi,...