Lucene search
+L

8781 matches found

Positive Technologies
Positive Technologies
added 2026/06/03 12:0 a.m.39 views

PT-2026-46087

When using React Router v7's unstable RSC APIs, there exists a potential client-side XSS issue in the RSC redirect handling if redirects are coming from untrusted sources !NOTE This only impacts your application if you are using the unstable RSC APIs in React Router...

8CVSS5.8AI score0.00188EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/02 11:53 p.m.22 views

CVE-2026-44579

A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open,...

7.5CVSS5.7AI score0.00712EPSS
SaveExploits1References4
Snyk
Snyk
added 2026/06/02 10:22 p.m.14 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the redirect handling of unstable React Server Components RSC APIs. An attacker can execute arbitrary JavaScript code in the user's browser by supplying a crafted javascript: redirect target from an untrusted...

8CVSS5.6AI score0.00188EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/02 8:16 p.m.16 views

CVE-2026-33245

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...

8CVSS0.00188EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/02 5:31 p.m.11 views

CVE-2026-34077 React Router vulnerable to Denial of Service via reflected user input in single-fetch

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...

7.5CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/02 5:31 p.m.46 views

CVE-2026-34077 React Router vulnerable to Denial of Service via reflected user input in single-fetch

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...

7.5CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/02 5:31 p.m.205 views

CVE-2026-34077

React Router upstream vulnerability CVE-2026-34077 affects versions 7.7.0–7.13.1 where, when using unstable React Server Components APIs, the RSC redirect handling can lead to a client-side XSS if redirects come from untrusted sources. The issue does not impact non-RSC applications. A fix is avai...

7.5CVSS5.8AI score0.00294EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2026/06/02 5:16 p.m.20 views

CVE-2024-42206

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application...

3.1CVSS0.00151EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/02 5:14 p.m.46 views

CVE-2026-33245 React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...

8CVSS0.00188EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/02 5:14 p.m.9 views

CVE-2026-33245

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...

8CVSS5.8AI score0.00188EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/02 4:1 p.m.18 views

CVE-2026-44593

esm.sh is a no-build content delivery network CDN for web development. In 137 and earlier, the legacy router first retrieves a response from legacyServer, parses the incoming request path, and ultimately writes the data to storage via buildStorage.Put. The router concatenates the path components...

8.7CVSS5.9AI score0.00362EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/02 3:57 p.m.45 views

CVE-2024-42206 HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application...

3.1CVSS0.00151EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/02 3:57 p.m.13 views

CVE-2024-42206 HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application...

3.1CVSS5.8AI score0.00151EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/02 3:57 p.m.17 views

EUVD-2024-55606

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application...

3.1CVSS5.8AI score0.00151EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/02 3:57 p.m.23 views

CVE-2024-42206

Technical details are not publicly available in the provided documents. Monitor for updates on affected components, root cause, and remediation.

3.1CVSS5.8AI score0.00151EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/02 3:57 p.m.11 views

CVE-2024-42206

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application...

3.1CVSS5.8AI score0.00151EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/02 12:17 p.m.14 views

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite uses cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl, axios-1.13.5.tgz, protobufjs-7.3.2.tgz and axios-1.15.0.tgz which are vulnerable to CVE-2026-34073, CVE-2026-39892, CVE-2025-62718, CVE-2026-40175, PSIRT-WS-2026-0004, CVE-2026-41242, CVE-2026-42033,...

7.5CVSS6.2AI score0.00808EPSS
SaveExploits8Affected Software1
OSV
OSV
added 2026/06/02 10:8 a.m.12 views

RHSA-2026:22330 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

7.5CVSS7.2AI score0.00341EPSS
SaveExploits1References14
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/02 7:7 a.m.26 views

Malicious code in @att-ebiz/abs-components-bc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8d1b46db555fda7536bcf080f9dfd0ceed5c731f7a96b2579121598dad6721 Package @att-ebiz/[email protected] is an empty placeholder published to public npm under a scope @att-ebiz that matches AT&T's internal...

6.2AI score
SaveExploits0References2
OSV
OSV
added 2026/06/02 7:7 a.m.18 views

MAL-2026-5153 Malicious code in @att-ebiz/abs-components-bc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8d1b46db555fda7536bcf080f9dfd0ceed5c731f7a96b2579121598dad6721 Package @att-ebiz/[email protected] is an empty placeholder published to public npm under a scope @att-ebiz that matches AT&T's internal...

6.2AI score
SaveExploits0References2
Rows per page
Query Builder