42394 matches found
CVE-2020-10634
SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
CVE-2019-18265
Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected content is stored in...
CVE-2022-31179
Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injection on windows. This impacts users that use Shescape any API function to escape arguments for cmd.exe on Windows An attacker can omit all arguments following their input by...
CVE-2022-35884
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacke...
CVE-2024-34510
Gradio before 4.20 allows credential leakage on Windows...
Malicious code in yunxohang5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8411b8cd6fea01585a7c07048bb6880d2d0fe380b145a797bce43b1e96388 The package yunxohang5 was found to contain malicious code. Source: ghsa-malware bef3f7dd8a9554ed61db94960f012c42f81192bb019b989608cd9db4e50dfb78 Any...
MAL-2026-185 Malicious code in yunxohang5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8411b8cd6fea01585a7c07048bb6880d2d0fe380b145a797bce43b1e96388 The package yunxohang5 was found to contain malicious code. Source: ghsa-malware bef3f7dd8a9554ed61db94960f012c42f81192bb019b989608cd9db4e50dfb78 Any...
MAL-2026-182 Malicious code in yunxohang10 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afa709f3be67acbb1d69b61e6897f6743d7feb8f9cb31e8b0109223c403858c The package yunxohang10 was found to contain malicious code. Source: ghsa-malware 5d4bc174ce0500df2bcfb0be9787d728083db08a933b9eb56bbe52e1cf37bfd1 An...
MAL-2026-186 Malicious code in yunxohang6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330a33730fe31c0ddee057fe9fa709d90447db3692211537a9570f70451e64a6 The package yunxohang6 was found to contain malicious code. Source: ghsa-malware 3f00c325c438e731f2f5c0a66e4135cf7e682994875cdc4e2df8dbffbdb299f6 Any...
GHSA-3C6G-7V4G-5XCM vulnerabilities
Vulnerabilities for packages: postgresql...
CVE-2026-21860
Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.5, Werkzeug's safejoin function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows, there are special device names such as CON, AUX, etc that are implicitly present...
USN-7949-1: Sodium vulnerability
It was discovered that Sodium incorrectly handled the elliptic curve point validity check in certain atypical use cases. This could result in invalid points being used, contrary to expectations...
CVE-2025-66002
An Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper...
CVE-2025-67603
A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This issue affects Foomuuri: from ? before 0.31...
CVE-2025-66002
An Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper...
MAL-2026-155 Malicious code in shaktihacker2026 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cb6457a3349374a4197b81f898e8188fd1fa57b63d5d1585e4f06ddca09316 The package shaktihacker2026 was found to contain malicious code. Source: ghsa-malware 8576dcfc2ee1fd97abb2cb2200663eea4537f4a39053e01984a915f8b570d2...
CVE-2025-61594 vulnerabilities
Vulnerabilities for packages: ruby, jruby...
GHSA-J4PR-3WM6-XX2R vulnerabilities
Vulnerabilities for packages: ruby, jruby...
