EUVD-2025-27713

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-31084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 There are...

CVE-2025-24022

iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, server code execution is possible through the frontend of iTop's portal. This is fixed in versions 2.7.12, 3.1.3 and 3.2.1...

PT-2024-32265 · Mattermost +1 · Mattermost +1

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.10.x through 9.10.2 Mattermost versions 9.11.x through 9.11.1 Mattermost versions 9.5.x through 9.5.9 Description: The issue is related to a failure in sanitizing user inputs in the frontend, which are used for...

WordPress plugin Display custom fields in the frontend Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Open-Xchange App Suite Cross-Site Scripting Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite backend version 7.10.6-rev52, Open-Xchange App Suite frontend version 7.10.6-rev35, which stems from not properly cleaning up user-defined...

Open-Xchange App Suite Cross-Site Scripting Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite frontend version 7.10.6-rev33. An attacker can exploit the vulnerability to inject script code...

CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

PT-2023-30330 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 8.7.55 TYPO3 versions prior to 9.5.44 TYPO3 versions prior to 10.4.41 TYPO3 versions prior to 11.5.33 TYPO3 versions prior to 12.4.8 Description: The issue affects TYPO3 installations with at least two different sites,...

Palantir Foundry 跨站脚本漏洞

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Palantir Foundry Frontend. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

CVE-2023-24601

OX App Suite before frontend 7.10.6-rev24 allows XSS via a non-app deeplink such as the jslob API's registry sub-tree...

PT-2023-20154

Name of the Vulnerable Software and Affected Versions DataHub affected versions not specified Description The DataHub frontend proxy does not properly construct URLs when forwarding data to the DataHub Metadata Store GMS, allowing external users to reroute requests to arbitrary hosts. This enable...

Cross site scripting

Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Users of the extension, who have overwritten the affected templates with custo...

Cross site scripting

Unvalidated input and lack of output encoding in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not sanitise the miccomment field Notes on time when adding/editing an event, allowing users with privilege as low as author to add events with a Cross-Site Scripting...

SQL Injection Vulnerability in Ke361 Frontend Ho*** Functions

Ke361 is an open source Taobao system. Ke361 front-end Ho function SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database data...

Stack overflow

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options...

SQL Injection Vulnerability in frontend of wise on-demand server software

wise on-demand server software is server-side distribution software that provides streaming playback of audio and video files. A SQL injection vulnerability exists in the frontend of the sewise VOD server software. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the Frontend of Zibo Shining Network Technology Co.

Zibo Shining Network Technology Co., Ltd. enterprise station building system is a specialized solution for enterprise station building products. Zibo Shining Network Technology Co., Ltd. enterprise website building system foreground there is a SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in JeecgBoot Frontend

JeecgBoot is a low-code BPM-based platform. A SQL injection vulnerability exists in the frontend of JeecgBoot. An attacker can exploit the vulnerability to obtain sensitive database information...

Stored XSS Vulnerability in Root the Box Frontend

Root the Box is a real-time capture-tagging CTF scoring engine for computer war games in which to practice and learn. The application can be easily configured and modified for any CTF style game. Root the Box suffers from a stored XSS vulnerability in the frontend that can be exploited by an...