CVE-2024-56143: Authorization Bypass Through User-Controlled Key

Strapi is an open-source headless content management system. In versions from 5.0.0 to before 5.5.2, the lookup operator provided by the document service does not properly sanitize query parameters for private fields. An attacker can access private fields, including admin passwords and reset...

CVE-2025-62382

CVE-2025-62382 affects Frigate (network video recorder for IP cameras). Before v0.16.2, the export workflow lets an authenticated operator nominate any filesystem path as the thumbnail source for a video export. The chosen path is copied verbatim into the publicly served clips directory, enabling...

GHSA-6XW4-3V39-52MM vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-rack, ruby3.3-rack, ruby3.2-rack, ruby3.4-rack...

CVE-2025-61780 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-rack, ruby3.3-rack, ruby3.2-rack, ruby3.4-rack...

CVE-2025-61919 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-rack, ruby3.3-rack, ruby3.2-rack, ruby3.4-rack...

GHSA-R657-RXJC-J557 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-rack, ruby3.3-rack, ruby3.2-rack, ruby3.4-rack...

GHSA-6XW4-3V39-52MM vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails, ruby3.2-rack, logstash, ruby3.4-rack, kube-fluentd-operator, ruby3.3-rack, ruby3.3-rails, ruby4.0-rack...

GHSA-R657-RXJC-J557 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails, ruby3.2-rack, logstash, ruby3.4-rack, kube-fluentd-operator, ruby3.3-rack, ruby3.3-rails, ruby4.0-rack...

CVE-2025-61780 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails, ruby3.2-rack, logstash, ruby3.4-rack, kube-fluentd-operator, ruby3.3-rack, ruby3.3-rails, ruby4.0-rack...

CVE-2025-61919 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, ruby3.4-rails, ruby3.2-rack, logstash, ruby3.4-rack, kube-fluentd-operator, ruby3.3-rack, ruby3.3-rails, ruby4.0-rack...

EUVD-2025-34516

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26861

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26861

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26861

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26861

CVE-2025-26861 affects RemoteCall Remote Support Program (for Operator). The vulnerability is an uncontrolled search path element (CWE-427) in versions prior to 5.3.0, which could allow arbitrary code execution if a crafted DLL is placed in the same folder as the affected product. Public sources ...

EUVD-2025-34515

RemoteCall Remote Support Program for Operator versions prior to 5.1.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26860

The CVE-2025-26860 entry concerns RemoteCall Remote Support Program (for Operator) prior to version 5.1.0. The vulnerability is an uncontrolled search path element (CWE-427) that can allow arbitrary code execution if a crafted DLL is placed in the application’s folder. Documents confirm the root ...

PT-2025-42232

RemoteCall Remote Support Program for Operator versions prior to 5.1.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

PT-2025-42233

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-62382: External Control of File Name or Path

Frigate is a network video recorder NVR with realtime local object detection for IP cameras. Prior to 0.16.2, Frigate's export workflow allows an authenticated operator to nominate any filesystem location as the thumbnail source for a video export. Because that path is copied verbatim into the...