GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: cg, flux-source-controller, kubescape, policy-controller-fips, sigstore-scaffolding-fips, spire-server, trivy, witness, zarf, trivy-operator, falcoctl, cloudbeat-fips, tekton-chains-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, goreleaser, policy-controller...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: cg, flux-source-controller, kubescape, policy-controller-fips, sigstore-scaffolding-fips, spire-server, trivy, witness, zarf, trivy-operator, falcoctl, cloudbeat-fips, tekton-chains-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, goreleaser, policy-controller...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: cg, flux-source-controller, kubescape, policy-controller-fips, sigstore-scaffolding-fips, spire-server, trivy, witness, zarf, trivy-operator, falcoctl, cloudbeat-fips, tekton-chains-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, goreleaser, policy-controller...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: cg, flux-source-controller, kubescape, policy-controller-fips, sigstore-scaffolding-fips, spire-server, trivy, witness, zarf, trivy-operator, falcoctl, cloudbeat-fips, tekton-chains-fips, ko, kyverno-policy-reporter-plugins-kyverno-fips, goreleaser, policy-controller...

EUVD-2002-0936

Malware in sbrugna...

EUVD-2002-0700

Malware in sbrugna...

EUVD-2002-0701

Malware in sbrugna...

EUVD-2018-14261

Malware in sbrugna...

EUVD-2002-0697

Malware in sbrugna...

cucumber-html-reporter-common-functions (>=1.0.24 <=1.0.32), cucumber-report-generator (=1.0.3) +10 more potentially affected by CVE-2017-16077 via mongose (=0.0.2-security)

mongose NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on mongose and may be impacted: - cucumber-html-reporter-common-functions =1.0.24, =1.0.0, =1.0.7, =1.0.58, =1.0.12, =1.0.17, =1.1.11 - owltech =1.0.0 - reports-server...

SAP Crystal Reports Server OEM Edition Local Elevation of Privilege Vulnerability

SAP Crystal Reports Server OEM Edition CRSE is a reporting solution from SAP. It enables the creation of richly formatted reports using what-if scenario models, interactive business dashboards, and charts, which can be delivered via the Web, e-mail, Microsoft Office, Adobe PDF, or embedded in...

CVE-2018-2406

Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...

CVE-2018-2406

Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...

Path traversal

Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...

CVE-2018-2406

CVE-2018-2406 affects SAP Crystal Reports Server OEM Edition (CRSE) startup path: unquoted Windows search path leads to local directory/path traversal. Versions 4.0, 4.10, 4.20, 4.30 are affected; local privilege elevation is indicated in connected CNVD entry. The vulnerability’s CVSS notes local...

CVE-2018-2406

Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...

Oracle Reports Server unauthorized report execution vulnerability-vulnerability warning-the black bar safety net

Affected system: Oracle Reports 9i Oracle Reports 6i 6.0.8.19 Oracle Reports 6i 6.0.8 Oracle Reports 6 Oracle Reports 10g 9.0.4.3.3 Oracle Reports 10g 9.0.4 Oracle Reports 10g 9.0.3 Oracle Reports 10g 9.0.2 Oracle Reports 10g 9.0.1 Oracle Reports 10g 9.0 Description:...

Oracle Reports Server 6.0.8/9.0.2 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5262/info A problem with Reports Server could make it possible to gain sensitive information from the server. Under some circumstances, Reports Server may yield sensitive information to unauthenticated remote users. This...

Oracle Reports Server 6.0.8/9.0.x Unauthorized Report Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14316/info Oracle Reports Server is susceptible to an unauthorized report execution vulnerability. By placing a report file in a globally accessible location, users can trigger the execution of the report by issuing an HT...

Oracle Reports Server 6.0.8/9.0.x XML File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14311/info Oracle Reports Server may allow remote attackers to disclose parts of arbitrary XML files. Reportedly, the server fails to restrict users from accessing parts of arbitrary XML files when handling specially...