apache__dolphinscheduler_CVE-2022-34662_2-0-9

Dolphin Scheduler 공식 웹사이트 dolphinscheduler.apache.org Total Lines 설계 특징 DolphinScheduler는 강력한 DAG 시각적 인터페이스를 갖춘 분산형이자 확장 가능한 워크플로 스케줄러 플랫폼으로, 데이터 파이프라인에서 복잡한 작업 종속성을 해결하고 다양한 유형의 작업을 out of the box 형태로 제공하는 데 전념합니다. 주요 목표는 다음과 같습니다: DAG 그래프에서 작업 간의 종속성에 따라 작업을 연결하며, 작업의 실행 상태를 실시간으로 시각화할 수 있습니다...

Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

Astra Linux – Vulnerability in klibc

A issue was discovered in klibc before version 2.0.9. Multiplication operations within the calloc function may lead to integer overflows and subsequent heap buffer overflows...

Astra Linux – Vulnerability in libsdl1.2, libsdl2

In SDLGetRGB in the video/SDLpixels.c file, there is a heap-based buffer over-read issue in versions from 1.2.15 up to 2.x, and from 2.0.9 onwards...

Astra Linux – Vulnerability in libsdl1.2, libsdl2

SDL Simple DirectMediaLayer from version 1.2.15 to 2.x, and from 2.0.9 to 2.0.9, has a heap-based buffer overflow issue in the MSADPCMDecode function within audio/SDLwave.c...

CVE-2026-19049

The ProSolution WP Client WordPress plugin (versions before 2.0.9 ) is vulnerable to unauthenticated SQL injection and plugin data deletion. The root cause is the failure to sanitize a cookie value before using it in SQL queries; the plugin processes this cookie on every request without any authe...

[SECURITY] Fedora 43 Update: libXfont2-2.0.9-1.fc43

X.Org X11 libXfont2 runtime library...

[SECURITY] Fedora 44 Update: libXfont2-2.0.9-1.fc44

X.Org X11 libXfont2 runtime library...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the dynamicDataField function in the FlexDirectory...

CVE-2026-27422 WordPress YT Player plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins YT Player yt-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YT Player: from n/a through 2.1.2...

EUVD-2026-48160

Unauthenticated Broken Access Control in YT Player = 2.0.9 versions...

WordPress YT Player plugin <= 2.0.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin YT Player versions = 2.0.9...

PT-2026-63818

Name of the Vulnerable Software and Affected Versions YT Player versions prior to 2.1.0 Description The YT Player – Embed and Customize Video Players plugin for WordPress contains a broken access control issue. This is caused by a missing capability check in a function, allowing unauthenticated...

Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-1972)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1972 advisory. containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are...

CVE-2026-40008 Apache IoTDB: Arbitrary Class Instantiation via Pipe Transfer RPC

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName.newInstance without any validation or allowlisting. This issue affects Apache IoTDB:...

CVE-2026-40005

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache IoTDB. An attacker can write arbitrary files anywhere the IoTDB process has write permissions with unsafe API. This issue affects Apache IoTDB: from 1.0.0 before 2.0.10. Users are recommended to...

EUVD-2026-39681

Unauthenticated Sensitive Data Exposure in Trinity Backup Backup, Migrate, Restore, Clone & Schedule Backups = 2.0.9 versions...

PT-2026-52736

Unauthenticated Sensitive Data Exposure in Trinity Backup Backup, Migrate, Restore, Clone & Schedule Backups = 2.0.9 versions...

WordPress Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups plugin <= 2.0.9 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by dodoh4t in WordPress Plugin Trinity Backup Backup, Migrate, Restore, Clone & Schedule Backups versions = 2.0.9...

CVE-2026-3297

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Anchor block in versions up to, and including, 2.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...