20883 matches found
CVE-2024-58129
In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...
CVE-2024-58128
In MISP before 2.4.193, menucustomrightlink parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks via a global menu link...
Malicious code in ui-driver-vultr (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2908 Malicious code in ui-driver-vultr (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in teleport-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c095dd595422be512b9e2f3a57d03c7a65553667c81b51fe163eb11fae8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2788 Malicious code in teleport-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c095dd595422be512b9e2f3a57d03c7a65553667c81b51fe163eb11fae8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2768 Malicious code in kaddex-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f347f71f4aaa1d161eda3bdcb1494331068aff9d830f7c93dcdc17c82462b7bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kaddex-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f347f71f4aaa1d161eda3bdcb1494331068aff9d830f7c93dcdc17c82462b7bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BIT-RABBITMQ-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI
RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...
Google Mesop 安全漏洞
Google Mesop is a Python-based UI framework from Google, Inc USA. A security vulnerability exists in Google Mesop versions prior to 0.14.1, which stems from class contamination could lead to a denial of service or other serious consequences...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2022-30615, CVE-2022-35642)
Summary A cross-site scripting vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-30615 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W...
Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulnerable to sensitive information exposure (CVE-2021-39087)
Summary IBM Sterling B2B Integrator dashboard UI has addressed a sensitive information exposure security vulnerability. Vulnerability Details CVEID:CVE-2021-39087 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive information due to...
Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulnerable to XSS (CVE-2021-39035)
Summary IBM Sterling B2B Integrator dashboard UI is vulnerable to cross-site scription XSS. The issue has been addressed. Vulnerability Details CVEID:CVE-2021-39035 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to...
The vulnerability of the Lite UI user interface library used in Apache ShardingSphere ElasticJob-UI for task scheduling arises from an internal index assignment error. This error allows attackers to gain unauthorized access to protected information.
The vulnerability of the Lite UI user interface library used in the Apache ShardingSphere ElasticJob-UI task scheduling software is related to an error in the assignment of the internal interface index. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
PT-2025-13172 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 14.9 through 17.8.6 GitLab EE versions 17.9 through 17.8.3 GitLab EE versions 17.10 through 17.10.1 Description: An issue was discovered in GitLab EE, where an input validation issue in the Harbor registry integration could...
CVE-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI
RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...
CVE-2025-30219
RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...
CVE-2025-30162 vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui...
