57 matches found
CVE-2026-100804
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Preferences: Backend component...
EUVD-2026-88957
Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157...
CVE-2026-19996
A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to improper privilege management. The attack can be executed...
CVE-2026-18900
A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the component Backend RPC. This manipulation of the argument File causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public...
PbootCMS 访问控制错误漏洞
PbootCMS is an open-source enterprise website content management system developed using the PHP language. Versions of PbootCMS 3.2.12 and earlier contain a security vulnerability related to access control. This vulnerability stems from an unknown function in the Backend component file...
EUVD-2025-205482
A vulnerability has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Affected is the function Upload of the file Admin/Home/Controller/ProductImageController.class.php of the component Backend. Such manipulation of the argument File leads to unrestricted upload. It is...
CVE-2025-14722
A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1. This impacts the function Add of the file Admin/Controller/AddonsController.class.php of the component Backend. Executing manipulation can lead to cross site scripting. The attack can be executed...
CVE-2025-14722
CVE-2025-14722 affects vion707 DMadmin (Backend) with a Cross-Site Scripting vulnerability in the Add function of Admin/Controller/AddonsController.class.php. A remote attacker can manipulate input to trigger XSS; exploits have been publicly disclosed. Affected versions are prior to 3403cafdb4253...
CVE-2025-14722 vion707 DMadmin Backend AddonsController.class.php add cross site scripting
A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1. This impacts the function Add of the file Admin/Controller/AddonsController.class.php of the component Backend. Executing manipulation can lead to cross site scripting. The attack can be executed...
CVE-2025-60739
Cross Site Request Forgery CSRF vulnerability in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before, Logic Version v6.00 - 20250721 allows a remote attacker to execute arbitrary code via the /bhwebbackend component...
CVE-2025-60739
Cross Site Request Forgery CSRF vulnerability in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before, Logic Version v6.00 - 20250721 allows a remote attacker to execute arbitrary code via the /bhwebbackend component...
EUVD-2024-32018
Malicious code in bioql PyPI...
EUVD-2024-31819
Malicious code in bioql PyPI...
EUVD-2025-1645
Malicious code in bioql PyPI...
EUVD-2025-10065
Malicious code in bioql PyPI...
EUVD-2024-33324
Malicious code in bioql PyPI...
EUVD-2025-6658
Malicious code in bioql PyPI...
EUVD-2022-3078
Malicious code in bioql PyPI...
CVE-2025-11136
A flaw has been found in YiFang CMS up to 2.0.2. The impacted element is the function webUploader of the file app/app/controller/File.php of the component Backend. Executing manipulation of the argument uploadpath can lead to unrestricted upload. The attack can be launched remotely. The exploit h...
The vulnerability of the Linux operating system’s backend component allows a perpetrator to gain access to confidential data and also cause service interruptions.
The vulnerability of the Linux operating system’s backend kernel component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...