56292 matches found
CVE-2025-5352
CVE-2025-5352 lunary-ai/lunary の Analytics コンポーネントにおいて、保存型クロスサイトスクリプティング（XSS）の脆弱性が確認されました。この問題は、NEXTPUBLICCUSTOMSCRIPT 変数が、適切なサニタイズや検証を行わずに dangerouslySetInnerHTML を使用して DOM に直接注入されるために発生します。 攻撃者がこの変数を制御できる場合（デプロイプロセス中、またはサーバー侵害を通じて）、任意の JavaScript...
CVE-2023-37190
CVE-2023-37190 — Issabel-PBX 4.0.0-6: 저장된 크로스 사이트 스크립팅XSS 📋 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2023-37190 취약점| 저장형 크로스 사이트 스크립팅XSS 영향받는 제품| Issabel-PBX 영향받는 버전| 4.0.0-6 심각도| 중간 CVSS v3.1 점수: 5.4 발견자| Sahil Ojha 공개 날짜| 2023년 7월 7일 공급업체| Issabel 소스 코드| IssabelFoundation/issabelPBX 테스트 환경| Windows 📝 설...
CVE-2018-6574
이 저장소에는 README가 없습니다...
EUVD-2026-91132
This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...
CVE-2026-104847: Improper Neutralization of Input During Web Page Generation
ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not passed through schema attribute validation. Whe...
PT-2026-105490
Summary The openUrl function in @a2ui/web core passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button,...
PT-2026-104395
Name of the Vulnerable Software and Affected Versions prosemirror-view versions prior to 1.42.3 Description The view component, which manages the editable browser interface for documents, contains a flaw in its paste handling. It accepts attacker-provided HTML where the clipboard slice context...
CVE-2026-102514
Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...
CVE-2026-93832
A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...
framework_base_AOSP10_r33_CVE-2021-39704
이 저장소에는 README가 없습니다...
framework_base_AOSP10_r33_CVE-2021-0314
이 저장소에는 README가 없습니다...
framework_base_AOSP10_r33_CVE-2021-0339
이 저장소에는 README가 없습니다...
CVE-2014-6271
CVE-2014-6271...
EUVD-2026-91054
Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...
CVE-2026-102514
PeaZip 11.2.0 and earlier versions are vulnerable to an Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component. The vulnerability occurs during PCOMPRESS1 stream decompression, where the 32-bit compsize field of the first bl...
EUVD-2026-91031
A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...
CVE-2026-93832
A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...
CVE-2026-75898
CVE-2026-75898 — RAGFlow InvokeコンポーネントのSSRF RAGFlowのエージェントワークフロー「Invoke」コンポーネントにおけるサーバーサイドリクエストフォージェリ（CWE-918）、0.26.3より前のバージョン が影響を受けます。 | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N 修正バージョン| v0.26.3 修正コミット| c4fe68e, e16d1a0 関連Issue| infiniflow/ragflow15425,...
