10282 matches found
CVE-2024-57097
ClassCMS 4.8 is vulnerable to Cross Site Scripting XSS in class/admin/channel.php...
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Summary Django-Unicorn is vulnerable to python class pollution vulnerability, a new type of vulnerability categorized under CWE-915. The vulnerability arises from the core functionality setpropertyvalue, which can be remotely triggered by users by crafting appropriate component requests and feedi...
GHSA-G9WF-5777-GQ43 Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Summary Django-Unicorn is vulnerable to python class pollution vulnerability, a new type of vulnerability categorized under CWE-915. The vulnerability arises from the core functionality setpropertyvalue, which can be remotely triggered by users by crafting appropriate component requests and feedi...
CVE-2024-57097
ClassCMS 4.8 is vulnerable to Cross Site Scripting XSS in class/admin/channel.php...
CVE-2025-24370: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Django-Unicorn adds modern reactive component functionality to Django templates. Affected versions of Django-Unicorn are vulnerable to python class pollution vulnerability. The vulnerability arises from the core functionality setpropertyvalue, which can be remotely triggered by users by crafting...
CVE-2024-57097: Improper Neutralization of Input During Web Page Generation
ClassCMS 4.8 is vulnerable to Cross Site Scripting XSS in class/admin/channel.php...
Class Pollution
Overview mesop is a Build UIs in Python Affected versions of this package are vulnerable to Class Pollution via the dataclassutils component. Remediation Upgrade mesop to version 0.14.1 or higher. References - GitHub Commit...
Security Bulletin: Improper Resource Allocation in IBM Jazz for Service Management due to Apache Commons IO XmlStreamReader Class (CVE-2024-47554)
Summary Improper Resource Allocation in IBM Jazz for Service Management due to Apache Commons IO XmlStreamReader Class CVE-2024-47554 Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Apache Commons IO is vulnerable to a denial of service, caused by an uncontrolled resource consumption flaw...
CVE-2024-40675
In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
bootplus 代码问题漏洞
bootplus is a permission management framework by JoeyBling Personal Developer. A code issue vulnerability exists in bootplus, which stems from the parameter PortraitFile in the file src/main/java/io/github/controller/SysFileController.java that can lead to unrestricted uploads...
PT-2025-5646 · Asteval · Asteval
Name of the Vulnerable Software and Affected Versions: asteval affected versions not specified Description: The issue arises from how asteval performs attribute access verification, specifically in the on attribute node handler. This handler prevents access to attributes that are either present i...
CVE-2025-24013
CodeIgniter is a PHP full-stack web framework. Prior to 4.5.8, CodeIgniter lacked proper header validation for its name and value. The potential attacker can construct deliberately malformed headers with Header class. This could disrupt application functionality, potentially causing errors or...
CVE-2025-24013: Interpretation Conflict
CodeIgniter is a PHP full-stack web framework. Prior to 4.5.8, CodeIgniter lacked proper header validation for its name and value. The potential attacker can construct deliberately malformed headers with Header class. This could disrupt application functionality, potentially causing errors or...
Ivanti Avalanche SecureFilter Authentication Bypass Vulnerability
This vulnerability allows remote attackers to partially bypass authentication on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecureFilter class. The issue results from incorrect string matching when...
Ivanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is...
USN-7208-1: Apache Commons BCEL vulnerability
Felix Wilhelm discovered that Apache Commons BCEL APIs incorrectly handled parameters due to a memory issue. An attacker supplying malicious input could exploit this to generate and execute arbitrary bytecode...
BIT-PYTHON-MIN-2020-14422
Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface...
PT-2025-19367 · Git +1 · Assimp
Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The software is susceptible to a heap-buffer-overflow READ issue. This occurs during the WriteObjects function within the Assimp::FBXExporter class, which is called by ExportBinary and...
CVE-2025-23026
jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with "script" tags or script attributes that include a Javascript template string backticks are subject to XSS. The "javaScriptBlock" and "javaScriptAttribute" methods...
WordPress plugin Coupon X 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...