31562 matches found
CVE-2021-47920 WebMO Job Manager 20.0 Cross-Site Scripting via Search Parameters
WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...
CVE-2021-47920
WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...
CVE-2021-47920
CVE-2021-47920 affects WebMO Job Manager 20.0. The vulnerability is a cross-site scripting flaw in search parameters, exploitable through the filterSearch and filterSearchType fields, enabling remote attackers to inject script code. Described impacts include non-persistent attacks such as session...
PT-2026-5565
WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...
WebMO Job Manager 跨站脚本漏洞
WebMO Job Manager is a core control panel for chemical computing software developed by WebMO Corporation. Version 20.0 of WebMO Job Manager contains a cross-site scripting vulnerability. This vulnerability stems from the search parameter, which has a cross-site scripting vulnerability, potentiall...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: gatus, octo-sts, whereabouts, dynamic-localpv-provisioner, gitleaks, kubernetes-csi-external-provisioner, goreleaser, mockgen, crossplane-provider-aws-cloudwatchlogs, metallb, falcosidekick, fixuid, eksctl, clickhouse-operator, crossplane-provider-family-aws, age, ko...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: gostatsd, gatus, bento, kubescape-operator, kyverno-policy-reporter-ui, crossplane-provider-aws-cloudfront, kube-vip-cloud-provider, docker-credential-ecr-login, timoni, kube-bench, kubernetes-csi-external-attacher, pvc-autoresizer, hydra, flannel,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: gatus, octo-sts, whereabouts, dynamic-localpv-provisioner, gitleaks, kubernetes-csi-external-provisioner, goreleaser, mockgen, crossplane-provider-aws-cloudwatchlogs, metallb, falcosidekick, fixuid, eksctl, clickhouse-operator, crossplane-provider-family-aws, age, ko...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: gatus, octo-sts, whereabouts, dynamic-localpv-provisioner, gitleaks, kubernetes-csi-external-provisioner, goreleaser, mockgen, crossplane-provider-aws-cloudwatchlogs, metallb, falcosidekick, fixuid, eksctl, clickhouse-operator, crossplane-provider-family-aws, age, ko...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, zitadel, headlamp-fips, sbomqs, prometheus-alertmanager-fips, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, nri-haproxy, kubeflow-fips, prometheus-mysqld-exporter,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, zitadel, headlamp-fips, sbomqs, prometheus-alertmanager-fips, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, nri-haproxy, kubeflow-fips, prometheus-mysqld-exporter,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, zitadel, headlamp-fips, sbomqs, prometheus-alertmanager-fips, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, nri-haproxy, kubeflow-fips, prometheus-mysqld-exporter,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, zitadel, headlamp-fips, sbomqs, prometheus-alertmanager-fips, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, kubeflow-fips, prometheus-mysqld-exporter,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: container-object-storage-interface-fips, nova-fips, zitadel, headlamp-fips, sbomqs, prometheus-alertmanager-fips, docker-machine-driver-linode, opensearch-k8s-operator, kubernetes-csi-node-driver-registrar-fips, nri-haproxy, kubeflow-fips, prometheus-mysqld-exporter,...
openSUSE 15 Security Update : assertj-core (SUSE-SU-2026:0344-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0344-1 advisory. Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion bsc1257293. Tenable has extracted the preceding description bloc...
CVE-2017-16744
creationtimestamp| type| source ---|---|--- 2026-01-30 19:02:30+00:00| seen| https://gist.github.com/aw-junaid/e5393ee0715383c3f6ffefc141c7b487 2026-08-25 16:24:58+00:00| seen| https://gist.github.com/bbrk364/c0171ce39dd4dd9700b98e3aedec0f0c...
Security Bulletin: XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - CVE-2025-13096
Summary IBM Business Automation Workflow is vulnerable to a XML eXternal Entity injection XXE attack. Vulnerability Details CVEID:CVE-2025-13096 DESCRIPTION: IBM Business Automation Workflow is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker...
CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation
Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...
CLEANSTART-2026-QJ89068 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the external-secrets-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...