3159 matches found
PT-2026-42450
Name of the Vulnerable Software and Affected Versions CODESYS Visualization affected versions not specified Description Insufficient isolation of authentication data may cause the remote exposure of credentials between low privileged visualization users during concurrent login operations. This...
CVE-2026-0393: Insufficiently Protected Credentials
The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session...
CVE-2026-24573
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n/a before 4.0.0...
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of the ongoing Mini Shai-Hulud attack wave. "The attack affects packages tied to the npm maintainer account atool, includin...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...
The vulnerability of Microsoft Data Formulator’s AI-based data visualization tool, related to improper code generation management, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Data Formulator, a tool for visualizing data based on artificial intelligence, is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2026-33079 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-8MP2-V27R-99XP vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2026-44708 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
GHSA-8G87-J6Q8-G93X vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
CVE-2026-44897 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
GHSA-58CW-G322-P94V vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
GHSA-8MP2-V27R-99XP vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
CVE-2026-33079 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
CVE-2026-44896 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
GHSA-V87V-83H2-53W7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...
CVE-2026-44431 vulnerabilities
Vulnerabilities for packages: aws-cli, jwt-tool, jupyter-base-notebook, py3-pipenv, dask-kubernetes, ggshield, datadog-agent, kubeflow-volumes-web-app, kubeflow-pipelines, py3-cassandra-medusa, pypy-3.10, neuvector-manager, superset, httpie, semgrep, pypy-3.11,...
GHSA-MF9V-MFXR-J63J vulnerabilities
Vulnerabilities for packages: aws-cli, jwt-tool, jupyter-base-notebook, py3-pipenv, dask-kubernetes, ggshield, datadog-agent, kubeflow-volumes-web-app, kubeflow-pipelines, py3-cassandra-medusa, pypy-3.10, neuvector-manager, superset, httpie, semgrep, pypy-3.11,...