CVE-2024-49824 IBM Robotic Process Automation security bypass

IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation...

@0xgg/echomd (>=1.0.0, <=1.0.4), @21st-night/analytics-web (>=0.65.0, <=0.73.8) +1193 more potentially affected by CVE-2025-23207 via katex (>=0.12.0, <=0.16.19)

katex NPM version =0.12.0, =1.0.0, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.53.0, =0.48.0, =0.53.0, =0.16.0, =0.49.0, =0.76.0, =1.0.7, =0.3.0, =0.6.2 and more Source cves: CVE-2025-23207 Source advisory: OSV:GHSA-CG87-WMX4-V546...

CVE-2024-26157

All versions of ETIC Telecom Remote Access Server RAS prior to 4.5.0 are vulnerable to reflected cross site scripting XSS attacks in get view method under view parameter. The ETIC RAS web server uses dynamic pages that get their input from the client side and reflect the input in their response t...

GHSA-9V8M-QV22-F268 Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length

Impact Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. Patches Patched in 8.13.16, 10.5.7, 13.2.2, 14.1.2...

CVE-2025-23041

Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This issue has been patched in versions 8.13.16, 10.5.7, 13.2.2, and 14.1.2. Users are advised to upgrade...

CVE-2025-23041

Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This issue has been patched in versions 8.13.16, 10.5.7, 13.2.2, and 14.1.2. Users are advised to upgrade...

CVE-2025-23041 Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms

Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This issue has been patched in versions 8.13.16, 10.5.7, 13.2.2, and 14.1.2. Users are advised to upgrade...

CVE-2025-23041: Improper Input Validation

Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This issue has been patched in versions 8.13.16, 10.5.7, 13.2.2, and 14.1.2. Users are advised to upgrade...

Microsoft Windows security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Client-Side Caching CSC Service. An attacker can exploit the vulnerability to elevate privileges. The following products and...

Umbraco Forms input validation vulnerability

Umbraco Forms is a form builder. An input validation error vulnerability exists in Umbraco Forms that stems from a short and long answer field character restriction for client-side validation only, which could lead to a data injection attack...

Microsoft Windows Buffer Error Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A buffer error vulnerability exists in the Microsoft Windows Client-Side Caching CSC Service. An attacker exploiting this vulnerability could gain access to sensitive information. The followi...

PT-2025-4787 · Umbraco · Umbraco Forms

Name of the Vulnerable Software and Affected Versions: Umbraco.Forms versions prior to 8.13.16 Umbraco.Forms versions prior to 10.5.7 Umbraco.Forms versions prior to 13.2.2 Umbraco.Forms versions prior to 14.1.2 Description: The character limits configured by editors for short and long answer...

PT-2025-1224 · Microsoft · Windows Csc Service +1

Name of the Vulnerable Software and Affected Versions: Windows CSC Service affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to disclose protected information. There is no information about the estimated number of...

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

CVE-2024-54999: Improper Control of Generation of Code

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

SAP GUI security vulnerabilities

SAP GUI is an application from SAP, a German company. graphical user interface for SAP systems. A security vulnerability exists in SAP GUI for Java that originates from saving user input on the client PC to improve usability, and an attacker is able to read this data...

MonicaHQ security vulnerabilities

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version v4.1.2, which stems from the presence of client-side injection initiated via the lastname parameter in the General Information module...

CVE-2024-54999

MonicaHQ version v4.1.2 is susceptible to a Client-Side Injection vulnerability. The flaw exists in the General Information module, specifically through the last_name parameter. This vulnerability can be exploited by an attacker. While no official patch is currently identified, it is recommended ...

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

PT-2025-3089

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.2 Description The issue is a Client-Side Injection vulnerability via the last name parameter in the General Information module. This vulnerability can be exploited. Recommendations For MonicaHQ version 4.1.2, as a temporar...