Lucene search
+L

8 matches found

CVE
CVE
•added 2026/11/05 2:25 a.m.•9 views

CVE-2026-122311

Kyverno versions 1.16.0 before 1.19.2 are vulnerable to a path traversal flaw in the resource argument of resource.get() and resource.post(). The root cause is a failure to validate path segments, which allows namespaced CEL policies to escape their intended namespace. An attacker with permission...

9.9CVSS6.2AI score0.00448EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/05 12:00 a.m.•4 views

PT-2026-137333

Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get and resource.post, allowing namespaced CEL policies to escape their namespace. Tenants who can create a NamespacedValidatingPolicy can insert .. segments to read and write arbitrary cluster...

9.9CVSS6.2AI score0.00448EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/26 2:16 p.m.•19 views

CVE-2026-100692

Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopped at the mount root itself, so a theme or module checked into themes/ or a vendored module could contain a symlink at a mount root for example themes/mytheme/assets -...

8.7CVSS0.00416EPSS
SaveExploits0References2
osv_pysec
osv_pysec
•added 2017/11/13 5:29 p.m.•52 views

PYSEC-2017-68

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources...

9.8CVSS4AI score0.02616EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2017/11/13 5:29 p.m.•32 views

CVE-2017-0906

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources...

9.8CVSS9.4AI score0.02616EPSS
SaveExploits0References3
Mend
Mend
•added 2017/11/13 5:00 p.m.•8 views

CVE-2017-0906

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources...

9.8CVSS0.02616EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/13 12:00 a.m.•6 views

CVE-2017-0906: Server-Side Request Forgery (SSRF)

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources...

9.8CVSS8.2AI score0.02616EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/11/13 12:00 a.m.•13 views

PT-2017-10706

Name of the Vulnerable Software and Affected Versions Recurly Client Python Library versions prior to 2.0.5 Recurly Client Python Library versions prior to 2.1.16 Recurly Client Python Library versions prior to 2.2.22 Recurly Client Python Library versions prior to 2.3.1 Recurly Client Python...

9.8CVSS0.02616EPSS
SaveExploits0References10
Rows per page
Query Builder