Lucene search
K

25 matches found

OSV
OSV
added 2026/04/23 3:52 a.m.3 views

MAL-2026-3003 Malicious code in @amsterdam-local/forms-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b91d9d855e239db33d7709fe9a88228eee0a166ce7312b5fb7f55f57dc488 The package @amsterdam-local/forms-component-library was found to contain malicious code. Source: ghsa-malware...

5.7AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/16 2:14 a.m.0 views

CVE-2026-6316

An use after free flaw was found in the Forms component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499384399...

9.6CVSS5.7AI score0.00056EPSS
Exploits0References5
CNVD
CNVD
added 2026/04/16 12:0 a.m.1 views

Google Chrome Forms component memory misreference vulnerability (CNVD-2026-17818)

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Forms component, which can be exploited by an attacker to execute arbitrary code from a specially crafted HTML page in a sandbox...

8.8CVSS6AI score0.00056EPSS
Exploits0
Snyk
Snyk
added 2026/03/03 6:42 a.m.1 views

Malicious Package

Overview tailwindcss-forms-component is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.9AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/03 6:42 a.m.6 views

Malicious code in tailwindcss-forms-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a402948dc389c4a201ac4271a843d78a5131d377a3904fe178b51c6aef5adb The package tailwindcss-forms-component was found to contain malicious code. Source: ghsa-malware...

5.7AI score
Exploits0References1
OSV
OSV
added 2026/03/03 6:42 a.m.3 views

MAL-2026-1211 Malicious code in tailwindcss-forms-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a402948dc389c4a201ac4271a843d78a5131d377a3904fe178b51c6aef5adb The package tailwindcss-forms-component was found to contain malicious code. Source: ghsa-malware...

5.7AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:37 p.m.1 views

CVE-2023-49052

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

8.8CVSS8AI score0.26275EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-2406

Malware in sbrugna...

4.3CVSS6.3AI score0.0042EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 5:20 a.m.1 views

CVE-2023-21993

Vulnerability in the Oracle Clinical Remote Data Capture product of Oracle Health Sciences Applications component: Forms. The supported version that is affected is 5.4.0.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Clinical...

6.5CVSS6AI score0.00479EPSS
Exploits0References1
NVD
NVD
added 2024/12/04 3:15 p.m.12 views

CVE-2024-40744

Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8...

9.8CVSS0.00057EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/04 3:2 p.m.13 views

CVE-2024-40745 Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8

Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8...

0.00155EPSS
Exploits0References1
CVE
CVE
added 2024/12/04 3:2 p.m.65 views

CVE-2024-40745

The CVE-2024-40745 entry concerns a Reflected Cross‑Site Scripting (XSS) vulnerability in the Joomla Convert Forms component, affecting versions prior to 4.4.8. Multiple connected sources (Red Hat, CVE lists, CNVD, CVE records) consistently identify the affected product as the Convert Forms compo...

5.4CVSS5.4AI score0.00155EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/04 3:1 p.m.14 views

CVE-2024-40744 Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8

Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8...

0.00057EPSS
Exploits0References1
OSV
OSV
added 2023/11/30 9:30 a.m.18 views

GHSA-2C7X-W3MX-H7P6 Microweber file upload vulnerability

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

8.8CVSS8.8AI score0.26275EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/11/30 9:30 a.m.17 views

Microweber file upload vulnerability

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

8.8CVSS8AI score0.26275EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/11/30 7:15 a.m.1 views

CVE-2023-49052

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

8.8CVSS6.1AI score0.26275EPSS
Exploits1References3
NVD
NVD
added 2023/11/30 7:15 a.m.8 views

CVE-2023-49052

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

8.8CVSS0.26275EPSS
Exploits1References2
Prion
Prion
added 2023/11/30 7:15 a.m.14 views

Unrestricted file upload

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component...

6.8CVSS8AI score0.26275EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.1 views

Microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A file upload vulnerability exists in Microweber version v.2.0.4, which stems from the...

8.8CVSS7.8AI score0.26275EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/01/03 12:0 a.m.4 views

PT-2023-3407 · Django +6 · Django +6

Name of the Vulnerable Software and Affected Versions: Django versions 3.2 through 3.2.18 Django versions 4.0 through 4.1.8 Django versions 4.2 through 4.2.0 Description: The issue is related to insufficient input validation in the forms.FileField and forms.ImageField components of the Django web...

10CVSS6.4AI score0.92834EPSS
Exploits30References127
Rows per page
Query Builder