1290 matches found
Improper Input Validation
github.com/grafana/grafana-infinity-datasource is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of allowed URL restrictions, which allows an attacker to bypass configured URL checks using a specially crafted URL...
Improper Input Validation
org.apache.zeppelin, zeppelin-jdbc is vulnerable to Improper Input Validation. The vulnerability is due to incomplete JDBC URL validation that failed to handle URL encoded input, which allows an attacker to bypass validation checks and potentially exploit database connections...
CVE-2025-55706
URL redirection to untrusted site 'Open Redirect' issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL...
Linux Distros Unpatched Vulnerability : CVE-2022-33980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolatio...
CVE-2025-54145
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme This vulnerability affects Firefox for iOS 141...
CVE-2025-4044 XML External Entity Injection vulnerability in various Lexmark Universal Drivers
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL...
Linux Distros Unpatched Vulnerability : CVE-2019-18862
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode. CVE-2019-18862 Note that Nessus relies on the...
CVE-2025-55192
creationtimestamp| type| source ---|---|--- 2025-08-14 19:21:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwf2rho26w25 2026-08-02 23:18:17+00:00| published-proof-of-concept| Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U 2026-08-03 00:26:58+00:00|...
Malicious code in alexr-locator-test (npm)
The package alexr-locator-test was found to contain malicious code...
Malicious code in modown-locator (npm)
The package modown-locator was found to contain malicious code...
MAL-2025-26595 Malicious code in modown-locator (npm)
The package modown-locator was found to contain malicious code...
MAL-2025-14295 Malicious code in alexr-locator-test (npm)
The package alexr-locator-test was found to contain malicious code...
BIT-LIBPHP-2021-21705 Incorrect URL validation in FILTER_VALIDATE_URL
In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filtervar function with FILTERVALIDATEURL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and...
BIT-LIBPYTHON-2022-0391
A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator URL strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an...
CVE-2025-4581
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows a pre-authentication blind SSRF vulnerability in the...
Linux Distros Unpatched Vulnerability : CVE-2023-4053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have le...
Foxit Reader Plugin 安全漏洞
Foxit Reader Plugin is a U.S. Foxit company's PDF reading plug-ins. A buffer overflow vulnerability exists in Foxit Reader Plugin version 2.2.1.530, which stems from incorrect handling of URL query strings and can be exploited by an attacker to cause a buffer overflow and arbitrary code execution...
WordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by muhammad yudha in WordPress Plugin WP Store Locator versions = 2.2.260...
git: Git does not sanitize URLs when asking for credentials interactively
A flaw was found in Git. This vulnerability occurs when Git requests credentials via a terminal prompt, for example, without the use of a credential helper. During this process, Git displays the host name for which the credentials are needed, but any URL-encoded parts are decoded and displayed...
