77 matches found
EUVD-2026-47862
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
Command Injection
Overview @syncfusion/ej2-base is an A common package of Essential JS 2 base libraries, methods and class definitions Affected versions of this package are vulnerable to Command Injection via the use of childprocess.exec function which uses the package name from package.json without escaping befor...
CVE-2026-16630
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
CVE-2026-16630
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
CVE-2026-16630 syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
CVE-2026-16630 syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
CVE-2026-16630
Vulnerability detail (CVE-2026-16630): Syncfusion ej2-javascript-ui-controls up to v33.2.3 contains a flaw in the function child_process.exec of package.json that enables local OS command execution. Reports indicate local access is required, and the exploit has been publicly disclosed. Affected c...
CVE-2026-16630 syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
PT-2026-63512
Name of the Vulnerable Software and Affected Versions syncfusion ej2-javascript-ui-controls versions prior to 33.2.4 Description An OS command injection flaw exists when the software is accessed locally. The issue resides in the child process.exec function within the package.json file, where...
CVE-2026-16630: Improper Neutralization of Special Elements used in an OS Command
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function childprocess.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly a...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
EUVD-2025-208909
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
CVE-2025-63260: Improper Neutralization of Input During Web Page Generation
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
PT-2026-26666
CVE-2025-63260 SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message. https://t.co/lkPWuPDbql...
SyncFusion 安全漏洞
SyncFusion is a set of enterprise-level UI component development tools provided by the American company SyncFusion. Version 30.1.37 of SyncFusion contains a security vulnerability. This vulnerability stems from the Document-Editor’s reply comment field and Chat-UI chat messages, and could lead to...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...
CVE-2025-63260
SyncFusion 30.1.37 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input. The vulnerability can be triggered through the Document-Editor reply to comment field and the Chat-UI Chat message component. Successful exploitation could allow an attacker to execute maliciou...