65 matches found
CVE-2026-16630
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
CVE-2026-16630 syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
CVE-2026-16630
Vulnerability detail (CVE-2026-16630): Syncfusion ej2-javascript-ui-controls up to v33.2.3 contains a flaw in the function child_process.exec of package.json that enables local OS command execution. Reports indicate local access is required, and the exploit has been publicly disclosed. Affected c...
CVE-2026-16630 syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
PT-2026-63512
Name of the Vulnerable Software and Affected Versions syncfusion ej2-javascript-ui-controls versions prior to 33.2.4 Description An OS command injection flaw exists when the software is accessed locally. The issue resides in the child process.exec function within the package.json file, where...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
EUVD-2025-208909
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
PT-2026-26666
CVE-2025-63260 SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message. https://t.co/lkPWuPDbql...
SyncFusion 安全漏洞
SyncFusion is a set of enterprise-level UI component development tools provided by the American company SyncFusion. Version 30.1.37 of SyncFusion contains a security vulnerability. This vulnerability stems from the Document-Editor’s reply comment field and Chat-UI chat messages, and could lead to...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
CVE-2025-63260
SyncFusion 30.1.37 is affected by a Cross-Site Scripting (XSS) vulnerability exposed through the Document-Editor’s reply-to-comment field and the Chat-UI chat messages. The issues are present in the UI components of SyncFusion for version 30.1.37 and are described consistently across Red Hat and ...
EUVD-2020-5779
Malware in sbrugna...
EUVD-2024-52869
Malicious code in bioql PyPI...
EUVD-2023-30359
Malicious code in bioql PyPI...
EUVD-2024-53509
Malicious code in bioql PyPI...
EUVD-2023-30358
Malicious code in bioql PyPI...