20028 matches found
Apache Spark UI - Cross-Site Scripting
Apache Spark UI before 2.3.2 is vulnerable to XSS via unsanitized query string parameters in the /jobs/ endpoint. id: CVE-2018-8024 info: name: Apache Spark UI - Cross-Site Scripting author: ritikchaddha severity: medium description: | Apache Spark UI before 2.3.2 is vulnerable to XSS via...
Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...
Nginx UI < 2.3.3 - Information Disclosure
Nginx UI 2.3.3 contains an information disclosure vulnerability caused by unauthenticated access to /api/backup endpoint exposing encryption keys in X-Backup-Security header, letting unauthenticated attackers download and decrypt full system backups. id: CVE-2026-27944 info: name: Nginx UI 2.3.3 ...
Nginx UI - Broken Access Control
Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover. id: CVE-2026-33032 info: name: Nginx UI - Broken Access Control author: DhiyaneshDk severity: critical description: | Network attackers can fully control ngi...
Fastify Swagger-UI - Information Disclosure
fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...
Oracle E-Business Suite - Server-Side Request Forgery
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. id:...
PT-2026-72211
In the Linux kernel, the following vulnerability has been resolved: llc: fix SAP refcount leak in llc ui autobind llc ui autobind opens a SAP after choosing a dynamic LSAP. llc sap open returns a reference owned by the caller, and llc sap add socket takes a second reference for the socket's...
CVE-2026-65975
A flaw was found in Pydantic AI's UI adapters, specifically within the sanitizemessages function. This vulnerability allows a remote client to bypass security checks and execute server tools with arguments they provide, rather than those generated by the AI model. This occurs when a trailing clie...
GO-2025-3462 vulnerabilities
Vulnerabilities for packages: temporal-server, temporal-ui-server-fips, temporal-server-fips, temporal, temporal-fips, temporal-ui-server...
GO-2025-3635 vulnerabilities
Vulnerabilities for packages: hubble, hubble-fips, hubble-ui-backend-fips...
GO-2024-2656 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...
GO-2026-4856 vulnerabilities
Vulnerabilities for packages: kubescape-server, kubescape-operator-fips, hubble-ui, kubescape, kubescape-operator, hubble, hubble-fips, kubescape-server-fips, hubble-ui-backend-fips...
GO-2024-2666 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2023-1862 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2025-3560 vulnerabilities
Vulnerabilities for packages: hubble, hubble-fips, hubble-ui...
GO-2024-2653 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...
GO-2025-4167 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...
GO-2026-5914 vulnerabilities
Vulnerabilities for packages: kubescape-server, kubescape-operator-fips, kubescape, hubble-ui, kubescape-operator, kubescape-server-fips, hubble-ui-backend-fips...