Lucene search
K

6 matches found

CNNVD
CNNVD
added 2026/02/03 12:0 a.m.3 views

Qwik 安全漏洞

Qwik is a micro-web framework developed by Qwik Dev. Versions of Qwik prior to 1.19.0 contained security vulnerabilities. These vulnerabilities stemmed from a prototype pollution vulnerability in the formToObj function, which could allow unauthenticated attackers to contaminate Object.prototype,...

10CVSS5.8AI score0.00624EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.3 views

Qwik 跨站脚本漏洞

Qwik is a micro-web framework developed by Qwik Dev. Versions of Qwik prior to 1.19.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from server-side rendering of virtual property serialization, which allowed remote attackers to inject arbitrary web scripts...

6.1CVSS5.8AI score0.00307EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.5 views

Qwik 输入验证错误漏洞

Qwik is a micro-web framework developed by Qwik Dev. Versions of Qwik prior to 1.19.0 contained a vulnerability related to input validation errors. This vulnerability stemmed from an open redirection vulnerability in the default request handler middleware, which could allow a remote attacker to...

6.9CVSS5.8AI score0.00237EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.4 views

PT-2026-6273

Name of the Vulnerable Software and Affected Versions Qwik versions prior to 1.19.0 Description A Cross-Site Scripting issue exists in Qwik.js' server-side rendering virtual attribute serialization. This allows a remote attacker to inject arbitrary web scripts into server-rendered pages via virtu...

5.3CVSS6AI score0.00307EPSS
Exploits0References11
CNNVD
CNNVD
added 2023/08/11 12:0 a.m.3 views

Intel ISPC Security Vulnerability

Intel ISPC is a program compiler from Intel Corporation USA. A security vulnerability exists in IntelR ISPC prior to version 1.19.0 that stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

7.8CVSS6.7AI score0.00144EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/08/02 12:0 a.m.2 views

ToolJet 访问控制错误漏洞

ToolJet is an extensible low-code framework for building business applications from ToolJet. An Access Control Error vulnerability exists in ToolJet versions prior to 1.19.0 that stems from incorrect access control...

9.8CVSS8.2AI score0.0094EPSS
Exploits1References3
Rows per page
Query Builder