5689 matches found
CVE-2025-31992
CVE-2025-31992 affects HCL Unica MaxAI Assistant. The issue is a HTML injection vulnerability where an attacker could insert special characters that are processed client-side within the user’s session. The CVSSv3.1 metrics in the initial data indicate: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N, base sc...
CVE-2025-31992 HCL MaxAI Assistant is susceptible to a HTML injection vulnerability
HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability. An attacker could insert special characters that are processed client-side in the context of the user's session...
PT-2025-41720
Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management Doors Next versions 7.0.2 through 7.1 Description An authenticated user on the network may be able to delete comments from other users. This is due to client-side enforcement of server-side security...
PT-2025-41708
Name of the Vulnerable Software and Affected Versions HCL Unica MaxAI Assistant affected versions not specified Description HCL Unica MaxAI Assistant is susceptible to a HTML injection issue. An attacker could insert special characters that are processed client-side within the user’s session...
PT-2025-41721
Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management Doors Next versions 7.0.2 through 7.1 Description An authenticated user on the network may be able to delete reviews belonging to other users. This is due to client-side enforcement of what should be...
IBM Engineering Requirements Management DOORS Next 安全漏洞
IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A security vulnerability exists in IBM Engineering Requirements Managemen...
IBM Engineering Requirements Management DOORS Next 安全漏洞
IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A security vulnerability exists in IBM Engineering Requirements Managemen...
HCL Unica MaxAI Assistant 安全漏洞
HCL Unica MaxAI Assistant is an AI assistant module from HCL India. A security vulnerability exists in HCL Unica MaxAI Assistant that stems from improper handling of client-side special characters, which could lead to HTML injection attacks...
python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
Summary ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to construct DNs from untrusted input can be made to consistently fail before a request is sent to the LDAP...
PT-2025-41626
🟠 python-ldap, Client-Side Denial of Service, CVE-2024-5319 Medium https://t.co/upnk2q5jR1...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Commerce Search Result widget when user-supplied input is injected into the Name text field of a Commerce Product. An attacker can execute arbitrary web scripts in the context of the user's browser by...
CVE-2025-3718 Client-side path traversal in Guardian/CMC before 25.2.0
A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scriptin...
EUVD-2007-5207
Malware in sbrugna...
EUVD-2011-2774
Malware in sbrugna...
EUVD-2020-27100
Malware in sbrugna...
EUVD-2018-8397
Malware in sbrugna...
EUVD-2010-4237
Malware in sbrugna...
EUVD-2019-7004
Malware in sbrugna...