Lucene search
K

7 matches found

EUVD
EUVD
added 2026/03/27 6:31 p.m.2 views

EUVD-2025-209105

Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUBTOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized actions such as pushing malicious commits...

8.3CVSS5.9AI score0.00028EPSS
Exploits1References3
NVD
NVD
added 2026/03/27 6:16 p.m.3 views

CVE-2025-15617

Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUBTOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized actions such as pushing malicious commits...

8.3CVSS0.00028EPSS
Exploits1References2
CVE
CVE
added 2026/03/27 6:4 p.m.11 views

CVE-2025-15617

CVE-2025-15617 concerns Wazuh v4.12.0, where a vulnerability in GitHub Actions workflow artifacts allows extraction of the GITHUB_TOKEN from uploaded artifacts. This exposed token, obtainable within a limited time window, could enable attackers to perform unauthorized actions such as pushing mali...

8.3CVSS5.9AI score0.00028EPSS
Exploits1References2Affected Software1
SUSE CVE
SUSE CVE
added 2026/02/07 12:27 a.m.2 views

SUSE CVE-2026-0798

Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potentially disclosing release titles, tags,...

3.5CVSS5.2AI score0.00017EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.2 views

PT-2026-4285

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea may send release notification emails for private repositories to users whose access has been revoked. This occurs when a repository is changed from public to private, potentially disclosi...

3.5CVSS5.2AI score0.00017EPSS
Exploits0References15
OSV
OSV
added 2024/05/02 2:15 p.m.17 views

CVE-2024-34148

Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'...

6.8CVSS7AI score
Exploits0References2
OSV
OSV
added 2024/03/06 12:13 p.m.4 views

CLSA-2024-1709727222 Update of linux-firmware

Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11; - Update AMD CPU microcode for processor family 17h: sig 0x00830f10; - Fix adding AMD CPU microcode for processor family 19h; - Fix release...

5.8AI score
Exploits0References1
Rows per page
Query Builder