1504 matches found
appRain CMF č·Øē«čę¬ę¼ę“
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which is caused by improper validation of user input by the /apprain/developer/addons/update/ace endpoint. An attacker could use this vulnerability to steal the victim's cookie-based...
KLA87209 ACE vulnerability in Microsoft Browser
Use after free vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-9478 Related products Microsoft-Edge CVE list CVE-2025-9478 critical Solution Install necessary updates from the Settings and more...
Linux Distros Unpatched Vulnerability : CVE-2021-27022
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should...
Linux Distros Unpatched Vulnerability : CVE-2014-6311
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
Malicious code in redux-ace (npm)
The package redux-ace was found to contain malicious code...
MAL-2025-13992 Malicious code in ace-one-widget-self-hosting (npm)
The package ace-one-widget-self-hosting was found to contain malicious code...
Malicious code in ace-one-widget-self-hosting (npm)
The package ace-one-widget-self-hosting was found to contain malicious code...
MAL-2025-31949 Malicious code in redux-ace (npm)
The package redux-ace was found to contain malicious code...
Malicious Package
Overview redux-ace is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Description of the security update for Microsoft Exchange Server 2016: August 12, 2025 (KB5063223)
None None...
MAL-2025-6690 Malicious code in ace-widgets (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in ace-widgets (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-53534
creationtimestamp| type| source ---|---|--- 2025-08-04 08:08:50+00:00| published-proof-of-concept| https://github.com/acepanel/panel/security/advisories/GHSA-fm3m-jrgm-5ppg...
KLA85940 ACE vulnerability in Opera
ACE vulnerability was found in Opera. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Opera 120 Related products Opera CVE list CVE-2025-6558 critical Solution Update to the latest version Download Opera Impacts ACE Arbitrary code execution...
KLA85873 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Insufficient validation of untrusted input vulnerability in ANGLE can be exploited remotely t...
CVE-2025-21082 arkui_ace_engine has a type confusion vulnerability
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion...
CVE-2025-21082
CVE-2025-21082 affects OpenHarmony v5.0.3 and earlier, with a type confusion vulnerability in the arkui_ace_engine that can cause local apps to crash. The issue is described as a local, low-privilege, low-complexity condition with availability impact (crash) and no confidentiality/integrity impac...
CVE-2025-20063
OpenHarmony CVE-2025-20063 affects OpenHarmony v5.0.3 and earlier, with a type-confusion vulnerability in the arkui_ace_engine that can allow a local attacker to crash apps (availability impact). The CVSS indicates low attack complexity and local access; impact is high for availability. No specif...
CVE-2024-22830
Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217 does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level...
CVE-2022-30276
The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 omit an authentication requirement. They feature IP Gateway modules which allow for interfacing between Motorola Data Link Communication MDLC networks potentially over a variety of serial, RF and/or Ethernet links and TCP/IP networks...