4801 matches found
Improper Neutralization
Overview chrome-devtools-frontend is a Chrome DevTools UI Affected versions of this package are vulnerable to Improper Neutralization due to insufficient sanitization of special whitespace characters in the escapeStringWin function. An attacker can execute arbitrary code by crafting malicious inp...
3rd-party-cpu-abuser (>=1.0.0, <=1.4.0), @2lkit/devtools (0.0.1-0) +163 more potentially affected by CVE-2025-12907 via chrome-devtools-frontend (>=1.0.377119-1, <=1.0.746710)
chrome-devtools-frontend NPM version =1.0.377119-1, =1.0.0, =1.2.2-beta, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =1.3.0-1, =1.0.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2025-12907 Source advisory: SNYK:JS-CHROMEDEVTOOLSFRONTEND-13866859...
GHSA-CM35-V4VP-5XVX Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
Summary Open WebUI v0.6.33 and below contains a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers via Server-Sent Event SSE execute events. This leads to authentication token theft, comple...
CVE-2025-57244
OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting XSS in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation...
CVE-2025-57244
OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting XSS in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation...
CVE-2025-57244
OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting XSS in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tags, by passing frontend validation...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989012)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989012 advisory. In the Linux kernel, the following vulnerability has been resolved: media: mxl111sf: change mutexinit location Syzbot reported, that mxl111sfctrlmsg uses uninitializ...
CVE-2025-30188
Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available...
CVE-2025-30188
Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available...
CVE-2025-30188
Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available...
CVE-2025-30188
Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available...
CVE-2025-30188
The CVE-2025-30188 entry describes a vulnerability in Open-Xchange OX App Suite where malicious or unintentional API requests can push large amounts of data into caches. This cache growth can evict information required for the web frontend to operate, potentially causing component unavailability....
EUVD-2025-37315
Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available...
EUVD-2025-37294
Malicious code in frontend-buenaspracticas npm...
Malicious code in frontend-buenaspracticas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef9514917e2ce04a8fcbc279aabe7da3662c4eb8292959fc964bf44280adf6 The package frontend-buenaspracticas was found to contain malicious code...
MAL-2025-49298 Malicious code in frontend-buenaspracticas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef9514917e2ce04a8fcbc279aabe7da3662c4eb8292959fc964bf44280adf6 The package frontend-buenaspracticas was found to contain malicious code...
PT-2025-44594
Name of the Vulnerable Software and Affected Versions Apache HTTP Cache affected versions not specified Description Malicious or unintentional API requests can be used to add a significant amount of data to caches. This can lead to the eviction of information required for the web frontend to...
Malicious code in epic-seller-portal-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78933e68c85739fc6835d5b050ec01d2cc65163acb0dc9030ebe46b176b52291 The package epic-seller-portal-frontend was found to contain malicious code...
Malicious code in epic-blog-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5261933fa561dedcb89fe55c6b41859e5b509696d851e692f37612199da591 The package epic-blog-frontend was found to contain malicious code...