← All credits
anonymous
160 vulnerability records and advisories credit this contributor.
CVE-2026-42252
Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern
CVE-2026-113583
Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js
CVE-2024-27123
QcalAgent
CVE-2026-49297
Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)
CVE-2022-34871
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of poller resources. The issue results fro
CVE-2026-45361
Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)
CVE-2025-15024
RCE in Yordam Informatics' Library Automation System
CVE-2025-15023
Improper Access Control in Yordam Informatics' Library Automation System
CVE-2026-41446
WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints
CVE-2023-27350
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The