7369 matches found
CVE-2025-7670: Improper Neutralization of Special Elements used in an SQL Command
The JS Archive List plugin for WordPress is vulnerable to time-based SQL Injection via the buildsqlwhere function in all versions up to, and including, 6.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
Linux Distros Unpatched Vulnerability : CVE-2021-27292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ua-parser-js = 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header,...
Linux Distros Unpatched Vulnerability : CVE-2020-7793
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service ReDoS in multiple regexes see linked commit for more info...
CVE-2025-9096 ExpressGateway express-gateway REST Endpoint apps.js cross site scripting
A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-9095
Summary: CVE-2025-9095 affects ExpressGateway up to 1.16.10. The issue resides in the REST Endpoint component, specifically the library file lib/rest/routes/users.js, where user-controlled input can cause cross-site scripting. The vulnerability can be triggered remotely and has publicly disclosed...
CVE-2025-54475: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands...
Malicious code in js-base64-int (npm)
The package js-base64-int was found to contain malicious code...
Malicious code in js-sla3 (npm)
The package js-sla3 was found to contain malicious code...
Malicious code in orderly-js-sdk-remix-template (npm)
The package orderly-js-sdk-remix-template was found to contain malicious code...
Malicious code in uglify-js-pipe-transform-lightyear (npm)
The package uglify-js-pipe-transform-lightyear was found to contain malicious code...
Malicious code in adyen-cse-js-2mundos (npm)
The package adyen-cse-js-2mundos was found to contain malicious code...
Malicious code in simple-js-sha3-384 (npm)
The package simple-js-sha3-384 was found to contain malicious code...
Malicious code in bigpicture-js (npm)
The package bigpicture-js was found to contain malicious code...
Malicious code in bunker-to-js (npm)
The package bunker-to-js was found to contain malicious code...
Malicious code in ctcommon-js (npm)
The package ctcommon-js was found to contain malicious code...
Malicious code in jetpack-js-tools (npm)
The package jetpack-js-tools was found to contain malicious code...
Malicious code in js-donkey (npm)
The package js-donkey was found to contain malicious code...
Malicious code in js-presets (npm)
The package js-presets was found to contain malicious code...