8599 matches found
MAL-2026-1627 Malicious code in @legacy-components/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b258e05eab0fc8de2df76077146cfaeb5a98fcaf9f13d1a54d4d24f70c0fe8c7 The package @legacy-components/core was found to contain malicious code...
Malicious code in @legacy-components/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b258e05eab0fc8de2df76077146cfaeb5a98fcaf9f13d1a54d4d24f70c0fe8c7 The package @legacy-components/core was found to contain malicious code...
CVE-2025-31966 Boolean-Based SQL Injection in Multiple Unica Components
HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server...
CVE-2025-31966
CVE-2025-31966 : HCL Sametime is vulnerable due to broken server-side validation that fails to enforce client-side input checks. An attacker can bypass restrictions by sending manipulated HTTP requests directly to the server. The documented CVSS 3.1 metrics indicate a LOW base score (2.7), with n...
The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components allows attackers to trigger a service failure.
The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
CVE-2025-62319 Boolean-Based SQL Injection in Multiple Unica Components
Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions TRUE or FALSE into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the...
CVE-2025-62319 Boolean-Based SQL Injection in Multiple Unica Components
Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions TRUE or FALSE into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the...
CVE-2025-62319
CVE-2025-62319 is described in Connected CVE records as a Boolean-Based SQL Injection affecting Multiple Unica Components. The root cause is blind SQL injection via boolean conditions injected into application input, causing the application to respond differently based on true/false evaluations. ...
EUVD-2026-12297
Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege...
EUVD-2026-12303
Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information...
EUVD-2025-208697
"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary...
CVE-2026-20993
Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information...
CVE-2026-20990
Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege...
CVE-2025-15540
"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary...
CVE-2025-15540 Authenticated RCE in Raytha CMS
"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary...
CVE-2025-15540 Authenticated RCE in Raytha CMS
"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary...
CVE-2025-15540
Raytha CMS is affected by CVE-2025-15540 in the Functions module. Privileged users can write and execute JavaScript that can instantiate .NET components and perform arbitrary operations within the hosting environment due to insufficient sandboxing/access restrictions. Impact is described as authe...
CVE-2025-15540
"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary...