147133 matches found
XWiki - Cross-Site Scripting
XWiki is vulnerable to reflected Cross-Site Scripting XSS via the viewer=changes endpoint. The rev2 parameter is not properly sanitised before being rendered in the response, allowing an attacker to inject arbitrary JavaScript. Affects XWiki versions prior to the patched release. id: CVE-2026-401...
Dify User Enumeration via Observable Response Discrepancy
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...
Rclone RC - Broken Access Control
Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...
9Router <= 0.4.36 - Unauthenticated RCE
9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...
Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control
Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....
Java-springboot-codebase 1.1 - Arbitrary File Read
OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...
CVE-2026-42533
CVE-2026-42533...
cve-2018-6574
لا يحتوي هذا المستودع على ملف README...
CVE-2025-29927
لا يحتوي هذا المستودع على ملف README...
CVE-2013-2165
CVE-2013-2165...
CVE-2021-41773
CVE-2021-41773...
CVE-2025-4172025
تنبيه أمني: CVE-2025-4172025 تم تقديم هذا الملخص الأمني بواسطة CoPilot ^1^. المحتوى المقدم على هذا الموقع متاح للأغراض المعلوماتية فقط، ويمكن لمحركات البحث أو نماذج اللغة LLMs الوصول إليه واستخدامه مع القيود التالية: يجوز إعادة إنتاج المحتوى أو تلخيصه أو استخدامه في الأعمال المشتقة، بشرط اتباع جم...
CVE-2018-11235
CVE-2018-11235...
CVE-2005-0575
لا يحتوي هذا المستودع على ملف README...
cve-2020-5902
cve-2020-5902...
CVE-2025-27410
CVE-2025-27410...
Jetty-CVE-2020-27223
Jetty-CVE-2020-27223...
CVE-2021-3156
CVE-2021-3156...