61 matches found
CVE-2026-48295 CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)
CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access. Exploitation of this issue does not require user interaction...
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to perform cross-site scripting (XSS) attacks.
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
CVE-2025-58742 Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture
Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle AiTM by modifying the 'Server' field to redirect client...
The vulnerability of the software interface for the training and control system “OLIMPOKS” allows a perpetrator to perform cross-site scripting attacks (XSS).
The vulnerability of the software interface for the training and control system “OLIMPOKS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...
The vulnerability of Kibana’s visualization data library “Vega” allows attackers to perform cross-site scripting attacks.
The vulnerability of the Vega library used by the Kibana data visualization service is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
EUVD-2020-24532
Malware in sbrugna...
EUVD-2020-5520
Malware in sbrugna...
EUVD-2020-16329
Malware in sbrugna...
EUVD-2019-10189
Malware in sbrugna...
EUVD-2018-21118
Malware in sbrugna...
EUVD-2018-1274
Malware in sbrugna...
EUVD-2019-10438
Malware in sbrugna...
EUVD-2024-18152
Malicious code in bioql PyPI...
EUVD-2024-18083
Malicious code in bioql PyPI...
EUVD-2022-25985
Malicious code in bioql PyPI...
EUVD-2023-24359
Malicious code in bioql PyPI...
EUVD-2022-26211
Malicious code in bioql PyPI...
EUVD-2024-18062
Malicious code in bioql PyPI...
CVE-2025-49186
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks...
CVE-2020-23585
A remote attacker can conduct a cross-site request forgery CSRF attack on OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028. The vulnerability is due to insufficient CSRF protections for the "mgmconfigfile.asp" because of which attacker can create a crafted "csrf for...