144150 matches found
GHSA-53WW-G6WP-VWP6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9M57-25V3-79X9 vulnerabilities
Vulnerabilities for packages: snyk-cli, commercial-expanso-edge, kube-arangodb-fips, etcd-fips, knative-eventing-fips, omnictl-multiarch, tigera-operator, istio, rancher, kuma, buildah-fips, helm, teleport-operator-fips, docker-cli-buildx-fips, knative-serving, harbor, buildah,...
GHSA-475M-PH3X-64GP vulnerabilities
Vulnerabilities for packages: ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-Q2GM-54R6-8FWM vulnerabilities
Vulnerabilities for packages: ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-RRMF-RVHW-RF47 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-JM82-FX9C-MX94 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, buildkitd, podman, falcoctl, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, helm, gitea, aactl, skaffold, prometheus, pulumi-language-java, k8sgpt, cilium-cli, zot,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: step, buildkitd, podman, falcoctl, helm, gitea, aactl, skaffold, prometheus, pulumi-language-java, k8sgpt, cilium-cli, zot, crossplane-provider-azure-sql, cluster-api-azure-controller, cloud-provider-aws, wolfictl, buildah, gitlab-runner, syft, pulumi-language-dotnet...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, buildkitd, podman, falcoctl, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, helm, gitea, aactl, skaffold, prometheus, pulumi-language-java, k8sgpt, cilium-cli, zot,...
UBUNTU-CVE-2026-53323
In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...
GHSA-4C8J-MGM4-QQVP
creationtimestamp| type| source ---|---|--- 2026-06-26 19:42:06+00:00| seen| https://gist.github.com/alon710/89044faa74c1d9de479703a9098fa939 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1745 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1745 2026-08-01 20:00:05+00:00| seen|...
External Control of File Name or Path
Overview Affected versions of this package are vulnerable to External Control of File Name or Path via unsanitized handling of the uploadId parameter in the multipart upload process. An attacker can create arbitrary files on the host system, potentially leading to arbitrary command execution, by...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the cron process in the app.json file. An attacker can execute arbitrary commands on the host system by injecting special shell characters into the cron command. Remediation Upgrade...
Apache Struts 2 - Remote Command Execution
Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 is susceptible to remote command injection attacks. The Jakarta Multipart parser has incorrect exception handling and error-message generation during file upload attempts, which can allow an attacker to execute arbitrary commands via a...
a4t-sale-discount (5.0.2), akademy-classe (>=1.0.0, <=7.0.0) +525 more potentially affected by CVE-2026-0685 via genshi (>=0.7.0, <=0.7.11)
genshi PYPI version =0.7.0, =1.0.0, =1.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.4, =0.1.0, =0.1.0, =2025.1.0b3, =0.1.0, =1.2.1 and more Source cves: CVE-2026-0685 Source advisory: SNYK:PYTHON-GENSHI-17675442...
GHSA-PX7Q-GGQJ-HCF2
creationtimestamp| type| source ---|---|--- 2026-06-26 16:42:20+00:00| seen| https://gist.github.com/alon710/8649cee74b41dfbab6352036ad771ea3 2026-06-26 16:52:45+00:00| seen| https://gist.github.com/alon710/ab6fb045bc60bbc32d947423444fcf91...
K000161930: Spring Framework vulnerability CVE-2026-41848
Security Advisory Description Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the following methods in AntPathMatcher: matchString pattern, String path,...
CGA-259J-6XQM-V974
Bulletin has no description...