68 matches found
CVE-2026-78490
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading ...
CVE-2026-78490
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading ...
CVE-2026-78490
Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Restriction of Excessive Authentication Attempts vulnerability in both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) editions. An unauthenticated attacker with network access could exploit thi...
PT-2026-88940
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading ...
CVE-2026-78490: Improper Restriction of Excessive Authentication Attempts
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading ...
CVE-2026-70480
Open WebUI prior to 0.11.0 renders Vega/Vega-Lite blocks in chat without restricted resource loading, enabling client-side SSRF: an attacker-blocked block can force the victim’s browser to issue attacker-controlled outbound GETs and read responses from same-origin or permissive CORS targets. Affe...
CVE-2026-26357
Dell Unisphere for PowerMax, version(s) 9.2.4.x , contains an Improper Neutralization of Input During Web Page Generation (XSS) vulnerability. A low-privilege, remote attacker could exploit this to execute malicious HTML/JavaScript in a victim's browser within the context of the vulnerable web ap...
CVE-2026-23861
Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML o...
CVE-2026-26357: Improper Neutralization of Input During Web Page Generation
Dell Unisphere for PowerMax, versions 9.2.4.x, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or...
CVE-2026-23861: Improper Neutralization of Input During Web Page Generation
Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML o...
CVE-2026-1201: Authorization Bypass Through User-Controlled Key
An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside of their authorized scope via client-side request manipulation...
EUVD-2023-48734
Malicious code in bioql PyPI...
EUVD-2024-22270
Malicious code in bioql PyPI...
EUVD-2022-36971
Malicious code in bioql PyPI...
EUVD-2023-48657
Malicious code in bioql PyPI...
EUVD-2024-22267
Malicious code in bioql PyPI...
EUVD-2024-22268
Malicious code in bioql PyPI...
CVE-2025-59414 Nuxt Client-Side Path Traversal in Nuxt Island Payload Revival
Nuxt is an open-source web development framework for Vue.js. Prior to 3.19.0 and 4.1.0, A client-side path traversal vulnerability in Nuxt's Island payload revival mechanism allowed attackers to manipulate client-side requests to different endpoints within the same application domain when specifi...
PT-2025-31810 · Dell · Dell Unity
Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.5 and prior Description: Dell Unity versions 5.5 and prior contain an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An unauthenticated attacker with remote access could...
CVE-2025-36605: Improper Neutralization of Input During Web Page Generation
Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'. An unauthenticated attacker with remote access could...