64 matches found
CVE-2026-48295 CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)
CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access. Exploitation of this issue does not require user interaction...
The vulnerability of the Banner component in the Open WebUI web interface allows a hacker to manipulate inter-site requests and intercept the administrator’s session.
The vulnerability of the Banner web interface component based on artificial intelligence, Open WebUI, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to manipulate inter-site requests and intercept the administrator...
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to perform cross-site scripting (XSS) attacks.
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
CVE-2025-58742 Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture
Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle AiTM by modifying the 'Server' field to redirect client...
The vulnerability of the userEmail component in the Linksys E8450 Wi-Fi router software allows a hacker to execute arbitrary commands.
The vulnerability of the userEmail component in the Linksys E8450 Wi-Fi router software relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the software interface for the training and control system “OLIMPOKS” allows a perpetrator to perform cross-site scripting attacks (XSS).
The vulnerability of the software interface for the training and control system “OLIMPOKS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...
The vulnerability of Kibana’s visualization data library “Vega” allows attackers to perform cross-site scripting attacks.
The vulnerability of the Vega library used by the Kibana data visualization service is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
EUVD-2019-10189
Malware in sbrugna...
EUVD-2020-5520
Malware in sbrugna...
EUVD-2020-24532
Malware in sbrugna...
EUVD-2018-21118
Malware in sbrugna...
EUVD-2020-16329
Malware in sbrugna...
EUVD-2019-10438
Malware in sbrugna...
EUVD-2018-1274
Malware in sbrugna...
EUVD-2024-18152
Malicious code in bioql PyPI...
EUVD-2024-18083
Malicious code in bioql PyPI...
EUVD-2023-24359
Malicious code in bioql PyPI...
EUVD-2022-25985
Malicious code in bioql PyPI...