41286 matches found
Grafana 10.4.x < 10.4.9 Multiple Vulnerabilities
According to its self-reported version, the Grafana install hosted on the remote host is 10.3.x earlier than 10.3.10, or 10.4.x earlier than 10.4.9, or 11.0.x earlier than 11.0.5, or 11.1.x earlier than 11.1.6, or 11.2.x earlier than 11.2.1. It is, therefore, affected by multiple vulnerabilities:...
Grafana 11.0.x < 11.0.5 Multiple Vulnerabilities
According to its self-reported version, the Grafana install hosted on the remote host is 10.3.x earlier than 10.3.10, or 10.4.x earlier than 10.4.9, or 11.0.x earlier than 11.0.5, or 11.1.x earlier than 11.1.6, or 11.2.x earlier than 11.2.1. It is, therefore, affected by multiple vulnerabilities:...
Grafana 11.2.x < 11.2.1 Multiple Vulnerabilities
According to its self-reported version, the Grafana install hosted on the remote host is 10.3.x earlier than 10.3.10, or 10.4.x earlier than 10.4.9, or 11.0.x earlier than 11.0.5, or 11.1.x earlier than 11.1.6, or 11.2.x earlier than 11.2.1. It is, therefore, affected by multiple vulnerabilities:...
Arbitrary Code Injection
Overview org.hibernate:hibernate-validator is a Hibernate Validator Engine Relocation Artifact. Affected versions of this package are vulnerable to Arbitrary Code Injection due to the interpolation of user-supplied input in constraint violation messages with Expression Language. An attacker can...
Arbitrary Code Injection
Overview org.hibernate.validator:hibernate-validator is a Hibernate Validator Engine Relocation Artifact. Affected versions of this package are vulnerable to Arbitrary Code Injection due to the interpolation of user-supplied input in constraint violation messages with Expression Language. An...
CVE-2025-25021 IBM QRadar Suite Software and IBM Cloud Pak for Security code injection
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case management script creation due to the improper generation of code...
CVE-2025-25021 IBM QRadar Suite Software and IBM Cloud Pak for Security code injection
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case management script creation due to the improper generation of code...
CVE-2025-1725
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it...
Gokapi has stored XSS vulnerability in friendly name for API keys
Impact By renaming the friendly name of an API key, an authenticated user could inject JS into the API key overview, which would also be executed when another user clicks on his API tab. With the affected versions v2.0, there was no user permission system implemented, therefore all authenticated...
shiyi-blog 代码注入漏洞
shiyi-blog is a vue+springboot front-end and back-end separated blog system by bule individual developer. A code injection vulnerability exists in shiyi-blog 1.2.1 and earlier versions, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter content...
IBM Cloud Pak for Security和IBM QRadar Suite 代码注入漏洞
IBM Cloud Pak for Security is a software application. An open security platform that connects to your existing data sources to generate deeper insights and enables you to take automated action faster.IBM QRadar Suite is an integrated security information and event management SIEM solution for...
CVE-2024-40114
A Cross Site Scripting XSS vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code...
Juzaweb CMS 代码注入漏洞
Juzaweb CMS is a content management system based on Laravel framework and Web platform developed by Juzaweb individual developers. A code injection vulnerability exists in Juzaweb CMS 3.4.2 and earlier versions, which originates from a cross-site scripting attack on the parameter Upload in the fi...
Mist 代码注入漏洞
Mist is the official command line interface to the makedeb package repository, a makedeb open source. A code injection vulnerability exists in Mist Community Edition 4.7.1 and earlier versions, which originates from a cross-site scripting attack in the parameter returnto in the file...
ConnectWise ScreenConnect Improper Authentication Vulnerability
ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised...
Craft CMS Code Injection Vulnerability
Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has registerargcargv enabled...
Mist 代码注入漏洞
Mist is an open source multi-cloud management platform from Mist, Inc. in the United States. A code injection vulnerability exists in Mist 4.7.1 and earlier versions, which originates from a cross-site scripting attack on the parameter tag in the file src/mist/api/tag/views.py...
Blogbook 代码注入漏洞
Blogbook is a content management system project by the individual developer Chaitak Gorai. A code injection vulnerability exists in Blogbook 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and prior versions, which originates from a cross-site scripting attack on the parameter fullname in the file...
Blogbook 代码注入漏洞
Blogbook is a content management system project by the individual developer Chaitak Gorai. A code injection vulnerability exists in Blogbook 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and earlier versions, which originates from a cross-site Scripting Attacks...
