44433 matches found
DoS (Denial of Service) ws Dependency in Confluence Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.3, and 9.4.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticate...
Missing Authentication for Critical Function
Overview hermes-agent is a The self-improving AI agent — creates skills from experience, improves them during use, and runs anywhere Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the handling of WebSocket upgrade requests on /api/pty, /api/ws,...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection through the saxonTransform function that uses unhardened net.sf.saxon.TransformerFactoryImpl method. An attacker can access sensitive local files or trigger arbitrary HTTPS requests from the host by...
earmark: Stored XSS via unescaped HTML attribute values
Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...
EUVD-2025-210256
Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...
EUVD-2025-210252
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
EUVD-2025-210262
Unauthenticated Local File Inclusion in Gamic = 1.15 versions...
EUVD-2025-210261
Unauthenticated Local File Inclusion in Preservation = 1.10 versions...
EUVD-2025-210258
Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...
EUVD-2026-37640
Subscriber Broken Authentication in Melhor Envio = 2.16.3 versions...
EUVD-2026-37487
Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...
EUVD-2026-37606
Unauthenticated Cross Site Scripting XSS in Kapee 1.7.1 versions...
EUVD-2026-37598
Subscriber Arbitrary File Upload in Restaurant Zone = 0.7.8 versions...
EUVD-2026-37491
Unauthenticated PHP Object Injection in Esmée = 1.4 versions...
EUVD-2026-37602
Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...
EUVD-2026-37607
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
EUVD-2026-37477
Unauthenticated Local File Inclusion in Aperitif = 1.5 versions...
EUVD-2026-37478
Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...