Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| bit-rclone-2026-88015 | rclone local: crafted Range request against a translated symlink panics (DoS) | UNKNOWN | bitnami_vulndb | unknown | |
| bit-rclone-2026-88014 | rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace | UNKNOWN | bitnami_vulndb | unknown | |
| bit-rclone-2026-88013 | rclone: http backend forwards custom/auth headers to a different host on redirect | UNKNOWN | bitnami_vulndb | unknown | |
| bit-gitlab-2026-85706 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab | UNKNOWN | bitnami_vulndb | unknown | |
| bit-python-min-2026-87910 | tarfile hardlink fallback ignores custom extraction filter rejection via None | UNKNOWN | bitnami_vulndb | unknown | |
| bit-python-2026-87910 | tarfile hardlink fallback ignores custom extraction filter rejection via None | UNKNOWN | bitnami_vulndb | unknown | |
| bit-libpython-2026-87910 | tarfile hardlink fallback ignores custom extraction filter rejection via None | UNKNOWN | bitnami_vulndb | unknown | |
| bit-python-min-2024-6232 | Regular-expression DoS when parsing TarFile headers | UNKNOWN | bitnami_vulndb | unknown | |
| bit-python-2024-6232 | Regular-expression DoS when parsing TarFile headers | UNKNOWN | bitnami_vulndb | unknown | |
| bit-libpython-2024-6232 | Regular-expression DoS when parsing TarFile headers | UNKNOWN | bitnami_vulndb | unknown | |
| bit-nifi-2026-87976 | Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles | UNKNOWN | bitnami_vulndb | unknown | |
| bit-nifi-2026-86089 | Apache NiFi: Missing Process Group Authorization for Connector Migration | UNKNOWN | bitnami_vulndb | unknown | |
| bit-nifi-2026-82561 | Apache NiFi: Missing Authorization for Components Referenced in Flow Update Methods | UNKNOWN | bitnami_vulndb | unknown | |
| bit-nifi-2026-81866 | Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration | UNKNOWN | bitnami_vulndb | unknown | |
| bit-nifi-2026-70469 | Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests | UNKNOWN | bitnami_vulndb | unknown | |
| bit-python-min-2026-82049 | tarfile extraction filters allow file modification and content disclosure via hard link to symlink | UNKNOWN | bitnami_vulndb | unknown | |
| bit-python-2026-82049 | tarfile extraction filters allow file modification and content disclosure via hard link to symlink | UNKNOWN | bitnami_vulndb | unknown | |
| bit-libpython-2026-82049 | tarfile extraction filters allow file modification and content disclosure via hard link to symlink | UNKNOWN | bitnami_vulndb | unknown | |
| bit-envoy-gateway-2026-53719 | Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization | UNKNOWN | bitnami_vulndb | unknown | |
| bit-envoy-gateway-2026-53718 | Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass | UNKNOWN | bitnami_vulndb | unknown | |
| bit-envoy-gateway-2026-53717 | Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header | UNKNOWN | bitnami_vulndb | unknown | |
| bit-envoy-gateway-2026-53716 | Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit | UNKNOWN | bitnami_vulndb | unknown | |
| bit-envoy-gateway-2026-53715 | Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock | UNKNOWN | bitnami_vulndb | unknown | |
| bit-envoy-gateway-2026-53714 | Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode | UNKNOWN | bitnami_vulndb | unknown | |
| bit-envoy-gateway-2026-53713 | Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure | UNKNOWN | bitnami_vulndb | unknown | |
| bit-zookeeper-2026-84501 | Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider | UNKNOWN | bitnami_vulndb | unknown | |
| bit-zookeeper-2026-84439 | Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources | UNKNOWN | bitnami_vulndb | unknown | |
| bit-zookeeper-2026-79993 | Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode | UNKNOWN | bitnami_vulndb | unknown | |
| bit-zookeeper-2026-59969 | Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode | UNKNOWN | bitnami_vulndb | unknown | |
| bit-zookeeper-2026-59739 | Apache ZooKeeper: Information disclosure via SetWatches reconnect replay | UNKNOWN | bitnami_vulndb | unknown |