3626 matches found
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, kubescape, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, zabbix-agent2-fips, hubble-ui-backend-fips, minc, longhorn-manager-fips, chisel-fips,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, kubescape, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, zabbix-agent2-fips, hubble-ui-backend-fips, minc, longhorn-manager-fips, chisel-fips,...
EUVD-2026-20765
ALEAPP Android Logs Events And Protobuf Parser through 3.4.0 contains a path traversal vulnerability in the NQVault.py artifact parser that uses attacker-controlled filenamefrom values from a database directly as the output filename, allowing arbitrary file writes outside the report output...
CVE-2026-40027
ALEAPP Android Logs Events And Protobuf Parser through 3.4.0 contains a path traversal vulnerability in the NQVault.py artifact parser that uses attacker-controlled filenamefrom values from a database directly as the output filename, allowing arbitrary file writes outside the report output...
CVE-2026-40027
ALEAPP (Android Logs Events And Protobuf Parser)
CVE-2026-40027 ALEAPP NQ Vault Artifact Parser Path Traversal
ALEAPP Android Logs Events And Protobuf Parser through 3.4.0 contains a path traversal vulnerability in the NQVault.py artifact parser that uses attacker-controlled filenamefrom values from a database directly as the output filename, allowing arbitrary file writes outside the report output...
CVE-2026-40027
ALEAPP Android Logs Events And Protobuf Parser through 3.4.0 contains a path traversal vulnerability in the NQVault.py artifact parser that uses attacker-controlled filenamefrom values from a database directly as the output filename, allowing arbitrary file writes outside the report output...
CVE-2026-40027 ALEAPP NQ Vault Artifact Parser Path Traversal
ALEAPP Android Logs Events And Protobuf Parser through 3.4.0 contains a path traversal vulnerability in the NQVault.py artifact parser that uses attacker-controlled filenamefrom values from a database directly as the output filename, allowing arbitrary file writes outside the report output...
CVE-2026-40027 ALEAPP NQ Vault Artifact Parser Path Traversal
ALEAPP Android Logs Events And Protobuf Parser through 3.4.0 contains a path traversal vulnerability in the NQVault.py artifact parser that uses attacker-controlled filenamefrom values from a database directly as the output filename, allowing arbitrary file writes outside the report output...
Android Logs Events And Protobuf Parser 路径遍历漏洞
Android Logs Events And Protobuf Parser is a tool developed by Brigs’ personal developer for parsing Android logs and protocol buffers. Versions of Android Logs Events And Protobuf Parser 3.4.0 and earlier contained a path traversal vulnerability. This vulnerability stemmed from the NQVault.py...
PT-2026-31464
ALEAPP Android Logs Events And Protobuf Parser through 3.4.0 contains a path traversal vulnerability in the NQ Vault.py artifact parser that uses attacker-controlled file name from values from a database directly as the output filename, allowing arbitrary file writes outside the report output...
EUVD-2026-19360
Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config admin.go, making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication,...
CVE-2026-34986 vulnerabilities
Vulnerabilities for packages: kubescape, timestamp-authority, trillian-fips, gogatekeeper, seaweedfs-rocksdb, keda, task, kubo, octo-sts, step-kms-plugin, kiali, grafana, pulumi, steampipe, vault-benchmark, crossplane-provider-terraform-fips, amazon-ssm-agent-fips, skopeo-fips, gitlab-workhorse-c...
GHSA-78H2-9FRX-2JM8 vulnerabilities
Vulnerabilities for packages: kubescape, timestamp-authority, trillian-fips, gogatekeeper, seaweedfs-rocksdb, keda, task, kubo, octo-sts, step-kms-plugin, kiali, grafana, pulumi, steampipe, vault-benchmark, crossplane-provider-terraform-fips, amazon-ssm-agent-fips, skopeo-fips, gitlab-workhorse-c...
GHSA-P5RH-VMHP-GVCW Dgraph: Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization
The restoreTenant admin mutation is missing from the authorization middleware config admin.go:499-522, making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication, restoreTenant executes with zero middleware. This mutation accepts...
PT-2026-29916
The restoreTenant admin mutation is missing from the authorization middleware config admin.go:499-522, making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication, restoreTenant executes with zero middleware. This mutation accepts...
CLEANSTART-2026-LZ54652 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0
Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LP76319 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.21.2-r0, 1.21.2-r1
Multiple security vulnerabilities affect the vault package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VL19675 Security fixes for CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.21.2-r0, 1.21.2-r1
Multiple security vulnerabilities affect the vault-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
