144 matches found
CVE-2026-101155
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
CVE-2026-101155 Security Advisory 0189
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
CVE-2026-101155 Security Advisory 0189
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
EUVD-2026-93951
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
CVE-2026-101155
An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack on the Software Management Studio Software Repository . By using specially crafted requests or file uploads, the attacker can read or write files on the platform filesystem beyond the intended ...
CVE-2026-101155: Improper Limitation of a Pathname to a Restricted Directory
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
Security Advisory 0189
Security Advisory 0189 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release 1.1 | October 13, 2026 | Updated Resolution section to include the 2026.3.0 release Description All CVEs covered in this advisory affect platforms running...
PT-2026-107137
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
EUVD-2026-62669
A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML...
PT-2026-78558
Name of the Vulnerable Software and Affected Versions volsync-addon-controller affected versions not specified Description A flaw exists that allows the injection of malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This occurs because...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fixed the null pointer issue when the SMU is disabled. It is necessary to check whether the ppfuncs is initialized before releasing the context; otherwise, a null pointer panic will occur when the software SMU is n...
Tanium Deploy security vulnerability
Tanium Deploy is a software management module developed by the American company Tanium. Tanium Deploy has a security vulnerability, which stems from improper input validation...
CVE-2024-34936
A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter...
CVE-2022-23473
Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.148, Authorizations are not properly verified when accessing MediaWiki standalone resources. Users with read only permissions for pages are able to also edit them. This on...
EUVD-2016-0876
Malware in sbrugna...
EUVD-2021-28264
Malicious code in bioql PyPI...
EUVD-2021-33421
Malicious code in bioql PyPI...
EUVD-2022-41758
Malicious code in bioql PyPI...