357 matches found
CVE-2026-2863 feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java deleteFile path traversal
A flaw has been found in fenghaha/megagao ssm-erp and productionssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. The impacted element is the function deleteFile of the file FileServiceImpl.java. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been...
CVE-2026-2860
A security vulnerability has been detected in fenghaha/megagao ssm-erp and productionssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. Impacted is an unknown function of the file EmployeeController.java. The manipulation leads to improper authorization. It is possible to initiate the attack...
CVE-2026-2860 feng_ha_ha/megagao ssm-erp/production_ssm EmployeeController.java improper authorization
A security vulnerability has been detected in fenghaha/megagao ssm-erp and productionssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. Impacted is an unknown function of the file EmployeeController.java. The manipulation leads to improper authorization. It is possible to initiate the attack...
ssm-erp和production_ssm 路径遍历漏洞
productionssm is an ERP system developed by MegaGao’s individual developers using Spring+SpringMVC+Mybatis and jQuery EasyUI. ssm-erp is a production management ERP system developed by fenghaha’s individual developers. Both ssm-erp and productionssm have a path traversal vulnerability in versions...
CVE-2026-2676
A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...
CVE-2026-2676
A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...
CVE-2026-2676
CVE-2026-2676 concerns the GoofTech sms-ssm API, specifically the preHandle function in LoginInterceptor.java under the API Interface component. The weakness is described as allowing improper authorization, potentially exploitable remotely. The exploit is reportedly public, with no disclosed vers...
CVE-2026-2676 GoogTech sms-ssm API LoginInterceptor.java preHandle improper authorization
A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...
PT-2026-20544
A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...
GHSA-37CX-329C-33X3 vulnerabilities
Vulnerabilities for packages: apko, gitaly-fips, tekton-pipelines-fips, gitsign, rancher-fleet, cloudbeat-fips, zot, argocd-image-updater-fips, trivy-operator-fips, gomplate, kyverno-fips, skaffold, pulumi-kubernetes-operator, cloudbeat, grype-fips, argo-cd-fips, kyverno, google-osconfig-agent,...
CVE-2026-25934 vulnerabilities
Vulnerabilities for packages: apko, gitaly-fips, tekton-pipelines-fips, gitsign, rancher-fleet, cloudbeat-fips, zot, argocd-image-updater-fips, trivy-operator-fips, gomplate, kyverno-fips, skaffold, pulumi-kubernetes-operator, cloudbeat, grype-fips, argo-cd-fips, kyverno, google-osconfig-agent,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: aws-node-termination-handler-fips, k8s-metacollector-fips, crossplane-provider-aws-ecr-fips, cluster-api-aws-controller, kubescape-http-request-fips, fluxcd-kustomize-mutating-webhook-fips, elvish, migrate, libnvidia-container, azuredisk-csi-fips, sealed-secrets-fips...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: aws-node-termination-handler-fips, k8s-metacollector-fips, crossplane-provider-aws-ecr-fips, cluster-api-aws-controller, kubescape-http-request-fips, fluxcd-kustomize-mutating-webhook-fips, migrate, libnvidia-container, azuredisk-csi-fips, sealed-secrets-fips,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: aws-node-termination-handler-fips, k8s-metacollector-fips, crossplane-provider-aws-ecr-fips, cluster-api-aws-controller, kubescape-http-request-fips, fluxcd-kustomize-mutating-webhook-fips, elvish, migrate, libnvidia-container, azuredisk-csi-fips, sealed-secrets-fips...
aws-manager (>=0.19.1 <=0.21.2), aws-secrets (>=0.1.0 <=0.1.1) +3 more potentially affected by unknown CVE via aws-sdk-ssm (>=0.10.1 <=0.24.0)
aws-sdk-ssm CARGO version =0.10.1, =0.19.1, =0.1.0, =0.7.0, =0.8.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G59M-GF8J-GJF5...
Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2025-3121 (ALAS-2025-3121)
The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3572.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3121 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy...
SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2025:4244-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4244-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or...
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2025:4244-1 Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...
openSUSE Security Advisory (SUSE-SU-2025:4191-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...