16838 matches found
CVE-2026-19986
A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the component Event Listener. This manipulation of the argument yt-anti-adblock-detected causes improper authorization. It...
CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. id: CVE-2023-43177 info: name: CrushFTP 10.5.1 - Unauthenticated Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: critical description: | CrushFTP prior...
SiYuan Note - Cross-Site Scripting
SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...
DbGate - Remote Code Execution via Dynamic Import Bypass
DbGate versions = 7.1.8 are vulnerable to authenticated remote code execution via the POST /runners/load-reader endpoint. The functionName parameter is directly interpolated into a JavaScript code template without sanitization. The require=null mitigation is bypassed via dynamic import. id:...
MAL-2026-14065 Malicious code in akamai-sensor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a8cc3668ec9751c1ef60bf602f1e08f2f2fdf8dce999e442c484458f932178 Package published under a name impersonating Akamai's sensordata anti-bot SDK. index.js contains a /... / comment whose body is encoded in invisible...
EUVD-2026-59592
The ECS WordPress plugin before 4.3.8 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who can open the page builder, allowing users with a contributor-level account or above to read, alter and delete the binding...
CVE-2026-14230
The CVE-2026-14230 entry describes a Stored XSS flaw in the ECS WordPress plugin (affected: versions before 4.3.8). The vulnerability arises because Dynamic Repeater AJAX handlers do not perform proper capability or object-ownership checks; access is gated only by a capability-agnostic nonce obta...
EUVD-2026-58857
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via 'username' Placeholder in Dynamic-Choice Field WHERE Clause in all versions up to, and including, 1.15.44 due to insufficient escaping on the user supplied...
PT-2026-72153
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via 'username' Placeholder in Dynamic-Choice Field WHERE Clause in all versions up to, and including, 1.15.44 due to insufficient escaping on the user supplied...
CVE-2026-12366
Zephyr's dynamic kernel-object disposal path unrefcheck in kernel/userspace/userspace.c frees an object's storage kfreedyn-data once its reference count reaches zero, after running a per-object-type cleanup. The cleanup switch handled only KOBJMSGQ and KOBJSTACK; there was no KOBJTIMER case. A...
GO-2022-0969 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, grpcurl, terraform-provider-sendgrid, hey, kubeflow, dynamic-localpv-provisioner, kube-state-metrics, wireguard-go, kubeflow-fips, dynamic-localpv-provisioner-fips, k3d, terraform-provider-sendgrid-fips...
GO-2022-0603 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator-fips, thanos-operator, dynamic-localpv-provisioner-fips...
GO-2022-0322 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...
GO-2022-0411 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...
GO-2021-0356 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, kubeflow-fips, dynamic-localpv-provisioner-fips, k3d, terraform-provider-sendgrid-fips...
GO-2021-0113 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, hey, vt-cli, gitleaks, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, k3d, terraform-provider-sendgrid-fips...
GO-2022-0968 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, kubeflow-fips, dynamic-localpv-provisioner-fips, k3d, terraform-provider-sendgrid-fips...
GO-2022-0493 vulnerabilities
Vulnerabilities for packages: grpcurl, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, ctop, kind, dynamic-localpv-provisioner-fips, k3d, terraform-provider-sendgrid-fips...
