446 matches found
MAL-2026-6493 Malicious code in prism-silq (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb3e8b0ded57991e21f137aac7c905348a83f6be7914c4da619c18d2acd280c The package ships a binding.gyp whose sources field uses GYP command-expansion syntax !... at line 6. npm implicitly runs node-gyp rebuild whenever a...
WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin <= 4.5.4 - Authenticated (Custom+) SQL Injection vulnerability
Authenticated Custom+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin Groundhogg versions = 4.5.4...
WordPress Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin <= 2.22.7 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by PRISM in WordPress Plugin Tourfic versions = 2.22.7...
CVE-2026-5944
An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an API passthrough endpoint on TCP port 7373 that is accessible within the network scope of the deployment environment without authentication. An unauthenticated...
CVE-2026-8875
The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...
CVE-2026-8875
The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...
CVE-2026-8875
Affected software : WordPress plugin Easy Prism Syntax Highlighter (versions ≤ 1.0.2). Vulnerability : Stored Cross-Site Scripting via the plugin’s 'code' and 'c' shortcode attributes due to insufficient input sanitization and output escaping in shortcode(), which concatenates the first positiona...
EUVD-2026-32083
The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...
CVE-2026-8875 Easy Prism Syntax Highlighter <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The Easy Prism Syntax Highlighter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'code' and 'c' shortcode in versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes in the...
WordPress plugin Easy Prism Syntax Highlighter 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
GHSA-Q8MJ-M7CP-5Q26 vulnerabilities
Vulnerabilities for packages: argo-workflows, saf, tileserver-gl, kubeflow-pipelines, langfuse, thingsboard, code-server, kubeflow-katib, py3-jupyterlab, sqlpad, prism, opensearch-dashboards, renovate, kubeflow-centraldashboard, json-server...
CVE-2026-8723 vulnerabilities
Vulnerabilities for packages: argo-workflows, saf, tileserver-gl, kubeflow-pipelines, langfuse, thingsboard, code-server, kubeflow-katib, py3-jupyterlab, sqlpad, prism, opensearch-dashboards, renovate, kubeflow-centraldashboard, json-server...
CVE-2026-8723 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, json-server, code-server, py3-captum, tensorflow-cpu-jupyter, py3-jupyterlab, kubeflow-pipelines, kibana, tileserver-gl-fips, langfuse, kubeflow-katib, thingsboard, thingsboard-fips, langfuse-fips, wazuh-dashboard, prism, opensearch-dashboards,...
GHSA-Q8MJ-M7CP-5Q26 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, json-server, code-server, py3-captum, tensorflow-cpu-jupyter, py3-jupyterlab, kubeflow-pipelines, kibana, tileserver-gl-fips, langfuse, kubeflow-katib, thingsboard, thingsboard-fips, langfuse-fips, wazuh-dashboard, prism, opensearch-dashboards,...
WordPress Easy Prism Syntax Highlighter plugin <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin Easy Prism Syntax Highlighter versions = 1.0.2...
CVE-2026-6321 vulnerabilities
Vulnerabilities for packages: argo-workflows, saf, tileserver-gl, vitess, langfuse, serve, prism, opensearch-dashboards...
GHSA-Q3J6-QGPJ-74H6 vulnerabilities
Vulnerabilities for packages: argo-workflows, saf, tileserver-gl, vitess, langfuse, serve, prism, opensearch-dashboards...
GHSA-Q3J6-QGPJ-74H6 vulnerabilities
Vulnerabilities for packages: keep-fips, gitlab-rails-ce, kibana, tileserver-gl-fips, langfuse, vitess, serve, drupal, langfuse-fips, wazuh-dashboard, prism, opensearch-dashboards, saf, tileserver-gl, gitlab-rails-ce-fips, keep, argo-workflows, arangodb, opensearch-dashboards-fips,...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, homepage, code-server, py3-captum, tensorflow-cpu-jupyter, jitsucom-jitsu, py3-jupyterlab, azurite, kibana, kubeflow-pipelines, langfuse, nextcloud-server, kubeflow-katib, gemini-cli, drupal, langfuse-fips, wazuh-dashboard, prism,...
Security Bulletin: There is a vulnerability in prismjs-1.23.0.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite ( CVE-2021-32723)
Summary There is a vulnerability in prismjs-1.23.0.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2021-32723 DESCRIPTION: Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of...