982 matches found
CVE-2026-33979: Permissive List of Allowed Inputs
Express XSS Sanitizer is Express 4.x and 5.x middleware which sanitizes user input data in req.body, req.query, req.headers and req.params to prevent Cross Site Scripting XSS attack. A vulnerability has been identified in versions prior to 2.0.2 where restrictive sanitization configurations are...
Craft CMS 安全漏洞
Craft CMS is an open-source content management system developed by Craft CMS. Vulnerabilities existed in versions 4.0.0-RC1 to 4.17.5, as well as in versions 5.0.0-RC1 to 5.9.11 of Craft CMS. These vulnerabilities were caused by behavior injection remote code execution vulnerabilities in the...
CVE-2026-25498 Craft has a potential authenticated Remote Code Execution via malicious attached Behavior
Craft is a platform for creating digital experiences. In versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a Remote Code Execution RCE vulnerability exists in Craft CMS where the assembleLayoutFromPost function in src/services/Fields.php fails to sanitize user-supplied configuratio...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001235)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001235 advisory. The cpreportfixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of servi...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003175)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003175 advisory. The cpreportfixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of servi...
CVE-1999-0034
Buffer overflow in suidperl sperl, Perl 4.x and 5.x...
CVE-2025-64460
An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. Algorithmic complexity in django.core.serializers.xmlserializer.getInnerText allows a remote attacker to cause a potential denial-of-service attack triggering CPU and memory exhaustion via specially crafted XML...
CVE-2025-11966
In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path...
EUVD-1999-1383
Malware in sbrugna...
EUVD-2020-17979
Malware in sbrugna...
EUVD-2016-4774
Malware in sbrugna...
EUVD-2000-0352
Malware in sbrugna...
EUVD-2016-3644
Malware in sbrugna...
EUVD-2014-3805
Malware in sbrugna...
EUVD-2020-3171
Malware in sbrugna...
EUVD-2019-0174
Malware in sbrugna...
EUVD-2014-2203
Malware in sbrugna...
EUVD-2013-4097
Malware in sbrugna...