Linux Distros Unpatched Vulnerability : CVE-2023-3922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions...

Linux Distros Unpatched Vulnerability : CVE-2024-32887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sidekiq is simple, efficient background processing for Ruby. Sidekiq is reflected XSS vulnerability. The value of substr parameter is reflected in the response...

Linux Distros Unpatched Vulnerability : CVE-2022-31160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially...

PT-2025-34912 · Unknown · Uicore Elements

Name of the Vulnerable Software and Affected Versions: UiCore Elements versions through 1.3.4 Description: The software contains a Stored Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into web...

Linux Distros Unpatched Vulnerability : CVE-2022-42799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visitin...

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-52217

SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. Legacy UI fields improperly handle user-supplied input, allowing injection of arbitrary HTML...

CVE-2025-52217

SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. Legacy UI fields improperly handle user-supplied input, allowing injection of arbitrary HTML...

MAL-2025-41430 Malicious code in epc-ui-tour (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 564b0da0b00f30ef4d3e9c7c03c624fe43365f10b3c1fa049ce0e7148373af4c The OpenSSF Package Analysis project identified 'epc-ui-tour' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in epc-ui-tour (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 564b0da0b00f30ef4d3e9c7c03c624fe43365f10b3c1fa049ce0e7148373af4c The OpenSSF Package Analysis project identified 'epc-ui-tour' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

SelectZero Data Observability Platform 安全漏洞

SelectZero Data Observability Platform is a data processing platform from SelectZero Estonia. A security vulnerability exists in SelectZero Data Observability Platform versions prior to 2025.5.2, which stems from mishandling of UI fields in older versions and could lead to HTML injection...

Linux Distros Unpatched Vulnerability : CVE-2021-29622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless...

Malicious code in credit-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 987abb2d3bc139ce43e5e14a9886ee8fe46062c76f4fe32f393ffc62fc2ec4a9 The OpenSSF Package Analysis project identified 'credit-app-ui' @ 99.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41347 Malicious code in credit-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 987abb2d3bc139ce43e5e14a9886ee8fe46062c76f4fe32f393ffc62fc2ec4a9 The OpenSSF Package Analysis project identified 'credit-app-ui' @ 99.1.1 npm as malicious. It is considered malicious because: - The package...

CVE-2025-57751

The CVE-2025-57751 issue affects pyLoad, specifically the CNL Blueprint. The vulnerability arises from missing validation of the jk parameter, which is processed as JavaScript via evaljs (depending on Python version, via js2py or dukpy). An attacker-supplied jk can cause the server to execute arb...

Malicious code in orion-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d017f02da39bfb33285066e5d65476f32d57195efe73652d4659863fe7b0367c The OpenSSF Package Analysis project identified 'orion-ui' @ 9.2.3 npm as malicious. It is considered malicious because: - The package...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the getLanguage and getClassTypeFields functions used by the Asset Publisher configuration UI. An attacker can execute arbitrary JavaScript in the context of the user's browser by injecting malicious inp...

CVE-2025-33008 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting

IBM Sterling B2B Integrator 6.2.1.0 and IBM Sterling File Gateway 6.2.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

CVE-2025-55287

Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Stored Cross-Site Scripting XSS vulnerability was identified in the Genealogy application. Authenticated attackers could run arbitrary JavaScript in another user’s session, leading to session hijacking, data theft, and UI...