5782 matches found
Linux Distros Unpatched Vulnerability : CVE-2015-8862
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is...
CVE-2025-43744
A stored DOM-based Cross-Site Scripting XSS vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.5, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 and...
Malicious code in kaltura-player-js (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-54726: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows SQL Injection.This issue affects JS Archive List: from n/a through 6.1.6...
CVE-2025-7670: Improper Neutralization of Special Elements used in an SQL Command
The JS Archive List plugin for WordPress is vulnerable to time-based SQL Injection via the buildsqlwhere function in all versions up to, and including, 6.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
Mermaid 跨站脚本漏洞
Mermaid is a mermaid-js open source application. Create charts and visualizations using text and code. A cross-site scripting vulnerability exists in Mermaid versions 10.9.0-rc.1 through 11.9.0, which stems from user-entered sequence diagram tags passed to innerHTML, potentially leading to...
Linux Distros Unpatched Vulnerability : CVE-2021-27292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ua-parser-js = 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header,...
Linux Distros Unpatched Vulnerability : CVE-2020-7793
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service ReDoS in multiple regexes see linked commit for more info...
CVE-2025-9096 ExpressGateway express-gateway REST Endpoint apps.js cross site scripting
A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-9095
Summary: CVE-2025-9095 affects ExpressGateway up to 1.16.10. The issue resides in the REST Endpoint component, specifically the library file lib/rest/routes/users.js, where user-controlled input can cause cross-site scripting. The vulnerability can be triggered remotely and has publicly disclosed...
CVE-2025-54475: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands...
Malicious code in yelp-js-infra (npm)
The package yelp-js-infra was found to contain malicious code...
Malicious code in js-donkey (npm)
The package js-donkey was found to contain malicious code...
Malicious code in js-cha3 (npm)
The package js-cha3 was found to contain malicious code...
Malicious code in js-qha3 (npm)
The package js-qha3 was found to contain malicious code...
Malicious code in js-wha3 (npm)
The package js-wha3 was found to contain malicious code...
Malicious code in ihm-js-coral-client (npm)
The package ihm-js-coral-client was found to contain malicious code...
Malicious code in js-shc3 (npm)
The package js-shc3 was found to contain malicious code...