@dicebear/collection (>=5.0.6, <=5.4.3), dicebear (>=5.0.6, <=5.4.3) potentially affected by CVE-2026-33311 via @dicebear/initials (>=5.0.6, <=5.4.3)

@dicebear/initials NPM version =5.0.6, =5.0.6, =5.0.6, =5.4.3 Source cves: CVE-2026-33311 Source advisory: OSV:GHSA-MR9R-MWW3-V6GV...

[20260305] - Core - Arbitrary file deletion in com_joomlaupdate

Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism...

[20260304] - Core - XSS vectors in various article title outputs

Lack of output escaping for article titles leads to XSS vectors in various locations...

[20260306] - Core - Improper access check in webservice endpoints

An improper access check allows unauthorized access to webservice endpoints...

EUVD-2024-52146

Malicious code in bioql PyPI...

EUVD-2025-9637

Malicious code in bioql PyPI...

EUVD-2025-8072

Malicious code in bioql PyPI...

CVE-2025-55372

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-55373

Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to escalate privileges and execute commands with Administrator rights...

CVE-2025-55373

Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to escalate privileges and execute commands with Administrator rights...

CVE-2025-55372

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-55372

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-55373

Beakon Application before v5.4.3 has an incorrect access control vulnerability that lets authenticated low-privilege users escalate to Administrator rights by exploiting weak authorization (e.g., crafting requests to elevate a user’s role). Root cause: missing/insufficient access checks. Impact: ...

CVE-2025-55373

Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to escalate privileges and execute commands with Administrator rights...

CVE-2025-55372

The CVE-2025-55372 entry concerns Beakon Application prior to version 5.4.3, where an arbitrary file upload flaw may lead to arbitrary code execution. Multiple sources (NVD, Red Hat, CVE List) corroborate the issue as a file upload vulnerability without explicit exploitation details in all docume...

CVE-2025-55372

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

Beakon Application 安全漏洞

Beakon Application is a software from Beakon Australia with features for managing workplace security, risk and compliance. A security vulnerability exists in Beakon Application versions prior to 5.4.3 that originates from an arbitrary file upload and could lead to the execution of arbitrary code...

PT-2025-35574

Name of the Vulnerable Software and Affected Versions: Beakon Application versions prior to 5.4.3 Description: An arbitrary file upload vulnerability exists in Beakon Application. This vulnerability allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: Update...

CVE-2025-58194

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through = 5.4.3...

Linux Distros Unpatched Vulnerability : CVE-2025-5204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump3DGSMDL7...