309 matches found
org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.3.0-rc1, <=5.3.0-rc3), org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=5.3.0-rc4, <=5.3.16) +3 more potentially affected by CVE-2026-40982 via org.springframework.cloud:spring-cloud-config-server (1.4.0.release)
org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...
EUVD-2026-17538
An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
FLY is FUN Aviation Navigation has a security vulnerability
FLY is FUN Aviation Navigation is a flight navigation and chart browsing application developed by the Czech company FLY is FUN. Version v35.33 of FLY is FUN Aviation Navigation contains a security vulnerability. This vulnerability stems from an issue with file import processes, where arbitrary...
CVE-2026-30278: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2020-7644
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...
Yintibao Fun Print Mobile security vulnerability
yintibao Fun Print Mobile is a mini-printer companion mobile application from China-based yintibao yintibao. A security vulnerability exists in yintibao Fun Print Mobile that stems from an exported Activity bypassing security controls, which could lead to Gmail inbox access...
EUVD-2025-117361
Malicious code in fun-coffee-butterfly npm...
EUVD-2025-98753
Malicious code in funponyz3n npm...
Malicious code in fun_pony_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf683a9c7bf985dc0b7cf4f80a823a3bf14c42100508427700a310b3e9f0fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74625
Malicious code in funtroutbeige-70 npm...
Malicious code in fun-rose-pinniped (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4bbbc1283ccb9d5328664b4f856e6f1f31c08f7860db0b845572c05dbb5f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54198
Malicious code in fun-magenta-salamander npm...
EUVD-2025-54196
Malicious code in fun-orange-manatee npm...
EUVD-2025-54195
Malicious code in fun-rose-pinniped npm...
EUVD-2025-54199
Malicious code in fun-amaranth-crow npm...
EUVD-2025-54197
Malicious code in fun-maroon-pike npm...
Malicious code in fun-maroon-pike (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26af88761afc73e2ba0b04877773dc1a295394c637b216673c147f7880e3f104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-10313
The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the faradminajaxfun function in all versions up to, and including, 1.1. This makes it possible for...
PT-2025-42298
Name of the Vulnerable Software and Affected Versions Find And Replace content for WordPress plugin versions prior to 1.2 Description The Find And Replace content for WordPress plugin for WordPress is susceptible to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement. This ...