8917 matches found
MINI-HM5W-9297-4W8J
Bulletin has no description...
MINI-68RW-CC4V-5833
Bulletin has no description...
MINI-CRRX-R358-G7JH
Bulletin has no description...
GHSA-3FC8-8HP6-6JR4 Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS
The ImageColumn and ImageEntry components render raw database values without escaping HTML. Where the data passed to these components isn't validated, an attacker could plant malicious HTML or JavaScript and achieve stored XSS that executes for users who view the table or schema...
CVE-2026-53622
Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 QUIC TLS configuration selection that allows unauthenticated clients to bypass router-specific mTLS enforcement. When HTTP/3 is enabled on an entrypoint, the TLS handshake...
Malicious code in analysis-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ab4349bcc1e8f4434817d242b136f6e6050d4acb234aa833d81ffd74942066 The package's postinstall hook install-hook.js, invoked via package.json scripts.postinstall fetches an opaque binary 'payload.bin' from...
MINI-9F9X-FRRG-QGRC
Bulletin has no description...
MINI-M74X-VFW5-FFM8
Bulletin has no description...
MINI-G99F-6M43-9JMJ
Bulletin has no description...
ECHO-2791-8592-919C
Bulletin has no description...
MINI-C3FF-R9VV-6CP3
Bulletin has no description...
MINI-WG36-8VCM-458V
Bulletin has no description...
MINI-RC28-8W32-GCMV
Bulletin has no description...
CVE-2026-10645
The Zephyr ext2 filesystem driver subsys/fs/ext2 trusted the on-disk directory entry fields dereclen and denamelen when walking a directory block. ext2fetchdirentry guarded only with denamelen EXT2MAXFILENAME, but denamelen is a uint8t and EXT2MAXFILENAME is 255, so the check is always false; the...
MINI-Q9WG-8P57-VRGM
Bulletin has no description...
MINI-5799-42J9-578M
Bulletin has no description...
MINI-FRX7-RPPV-HPC2
Bulletin has no description...
CVE-2026-48167
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the ImageColumn and ImageEntry components render raw database values without escaping HTML. Where the data passed to these components isn't validated, an attacker could plant...
CVE-2026-48167
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the ImageColumn and ImageEntry components render raw database values without escaping HTML. Where the data passed to these components isn't validated, an attacker could plant...