PT-2026-38087

Name of the Vulnerable Software and Affected Versions Rucio versions 1.30.0 through 35.8.4 Rucio versions 38.x through 38.5.4 Rucio versions 39.x through 39.4.1 Rucio versions 40.x through 40.1.0 Description An issue exists in the FilterEngine.create postgres query function where authenticated...

CVE-2026-29080: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in FilterEngine.createsqlaquery allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint GET /dids/ /dids/search. On Oracle deployments attacker-controlled filter keys and values are interpolated direct...

Rucio SQL injection vulnerability

Rucio is an open-source scientific data management tool developed by Rucio team. Rucio has a SQL injection vulnerability, which stems from the SQL injection in the FilterEngine.createsqlaquery method. This vulnerability allows any authenticated Rucio user to execute arbitrary SQL queries against...

CVE-2026-21661: Uncontrolled Search Path Element

An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths. This issue affects AC2000: from 10.6 before release 10, from 11.0 before release 9, from 12 before release 3...

PT-2026-37659

Name of the Vulnerable Software and Affected Versions JohnsonControls AC2000 versions 10.6 through 10 JohnsonControls AC2000 versions 11.0 through 9 JohnsonControls AC2000 versions 12 through 3 Description An uncontrolled search path element issue allows for the manipulation of configuration file...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-40110 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-40110 Source advisory: OSV:PYSEC-2026-2187...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-40934 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-35397 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-35397 Source advisory: OSV:PYSEC-2026-68...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-40934 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-40934 Source advisory: OSV:GHSA-5MRQ-X3X5-8V8F...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-40110 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-40110 Source advisory: OSV:GHSA-24QX-W28J-9M6P...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-35397 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-35397 Source advisory: OSV:GHSA-5789-5FC7-67V3...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2025-61669 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2025-61669 Source advisory: OSV:GHSA-QH7Q-6QM3-653W...

EUVD-2023-60574

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

CVE-2023-54349

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

CVE-2023-54349

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

CVE-2023-54349 AmazCart CMS 3.4 Reflected Cross-Site Scripting via Search

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

CVE-2023-54349 AmazCart CMS 3.4 Reflected Cross-Site Scripting via Search

AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...

CVE-2023-54349

AmazCart CMS 3.4 is affected by a reflected cross-site scripting (XSS) vulnerability in the search functionality. The issue allows unauthenticated attackers to inject arbitrary JavaScript by submitting payloads in the search input, with scripts potentially executing when search results or history...

CVE-2026-40201

@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file...

GHSA-XHJH-PMCV-23JW Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams

Vulnerability Disclosure: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams Summary The encode function in lib/helpers/AxiosURLSearchParams.js contains a character mapping charMap at line 21 that reverses the safe percent-encoding of null bytes. After encodeURIComponent'\x00'...