Lucene search
+L

5944 matches found

vulnersOsv
vulnersOsv
•added 2026/03/27 6:06 p.m.•12 views

@n8n/backend-test-utils (>=1.10.0, <=1.10.1), @n8n/db (>=1.10.0, <=1.10.2) +2 more potentially affected by unknown CVE via n8n-core (>=2.10.0, <=2.10.1)

n8n-core NPM version =2.10.0, =1.10.0, =1.10.0, =2.10.0, =2.10.1 - n8n-runner 0.0.4 Source cves: unknown CVE Source advisory: SNYK:JS-N8NCORE-15825749...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/03/26 3:06 p.m.•18 views

CVE-2026-4594

A vulnerability has been found in erupts erupt up to 1.13.3. Affected by this issue is the function geneEruptHqlOrderBy of the file erupt-data/erupt-jpa/src/main/java/xyz/erupt/jpa/dao/EruptJpaUtils.java. Such manipulation of the argument sort.field leads to sql injection hibernate. It is possibl...

7.5CVSS6.7AI score0.00411EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/03/26 9:23 a.m.•13 views

SUSE CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

7.3CVSS7.9AI score0.00663EPSS
SaveExploits0References12
OSV
OSV
•added 2026/03/26 12:00 a.m.•9 views

OPENSUSE-SU-2026:10439-1 plexus-utils-4.0.2-2.1 on GA media

These are all security issues fixed in the plexus-utils-4.0.2-2.1 package on the GA media of openSUSE Tumbleweed...

8.8CVSS7.4AI score0.00663EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/25 10:39 p.m.•15 views

CVE-2025-67030

A flaw was found in plexus-utils. This vulnerability, known as a Directory Traversal, exists within the extractFile method. An attacker can exploit this to execute unauthorized code on the system in the context of the current working user. Mitigation Mitigation for this issue is either not...

8.8CVSS7.5AI score0.00663EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2026/03/25 6:31 p.m.•15 views

Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS7.9AI score0.00663EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2026/03/25 6:16 p.m.•15 views

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS0.00663EPSS
SaveExploits0References37
OSV
OSV
•added 2026/03/25 6:16 p.m.•12 views

DEBIAN-CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS7.9AI score0.00663EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/25 6:16 p.m.•12 views

AZL-81041 CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS7.9AI score0.00663EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/03/25 6:16 p.m.•12 views

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS7.6AI score0.00663EPSS
SaveExploits0References6
OSV
OSV
•added 2026/03/25 6:16 p.m.•16 views

UBUNTU-CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

8.8CVSS7.9AI score0.00663EPSS
SaveExploits0References7
Snyk
Snyk
•added 2026/03/25 12:42 p.m.•15 views

Malicious Package

Overview changelog-utils-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.9AI score
SaveExploits0References2
OSV
OSV
•added 2026/03/25 12:42 p.m.•15 views

MAL-2026-2191 Malicious code in changelog-utils-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766b0a70c145b6eea78f6d7852be0ff75da958b1c0f465aa5108a1acabb5e9b2 The package changelog-utils-logger was found to contain malicious code. Source: ghsa-malware...

5.8AI score
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/03/25 10:17 a.m.•16 views

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

8.7CVSS6.9AI score0.01631EPSS
SaveExploits0References24
OSV
OSV
•added 2026/03/25 10:15 a.m.•11 views

SUSE-SU-2026:1027-1 Security update for salt

This update for salt fixes the following issues: - Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

7.5CVSS6.9AI score0.01631EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2026/03/25 10:15 a.m.•25 views

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

8.7CVSS6.8AI score0.01631EPSS
SaveExploits0References24
OSV
OSV
•added 2026/03/25 10:10 a.m.•13 views

SUSE-SU-2026:1012-1 Security update 5.0.7 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

7.8CVSS6.9AI score0.01631EPSS
SaveExploits0References16
Cvelist
Cvelist
•added 2026/03/25 12:00 a.m.•56 views

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

0.00663EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•19 views

Plexus-utils 安全漏洞

Plexus-utils is a general-purpose utility developed by Plexus Open Source. This program is primarily used to simplify the handling of strings, files, command lines, XML, etc. A security vulnerability existed in Plexus-utils 6d780b3378829318ba5c2d29547e0012d5b29642 and earlier versions. This...

8.8CVSS7.7AI score0.00663EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/03/25 12:00 a.m.•17 views

Directory Traversal

Overview org.codehaus.plexus:plexus-utils is a collection of various utility classes to ease working with strings, files, command lines, XML and more. Affected versions of this package are vulnerable to Directory Traversal via the extractFile function. An attacker can exploit this to execute...

8.8CVSS7.6AI score0.00663EPSS
SaveExploits0References2
Rows per page
Query Builder