7369 matches found
Mermaid cross-site scripting vulnerabilities
Mermaid is a mermaid-js open source application. Create charts and visualizations using text and code. A cross-site scripting vulnerability exists in Mermaid versions 10.9.0-rc.1 through 11.9.0, which stems from user-entered sequence diagram tags passed to innerHTML, potentially leading to...
Linux Distros Unpatched Vulnerability : CVE-2020-7793
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service ReDoS in multiple regexes see linked commit for more info...
Linux Distros Unpatched Vulnerability : CVE-2021-27292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ua-parser-js = 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header,...
CVE-2025-9096 ExpressGateway express-gateway REST Endpoint apps.js cross site scripting
A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-9095
Summary: CVE-2025-9095 affects ExpressGateway up to 1.16.10. The issue resides in the REST Endpoint component, specifically the library file lib/rest/routes/users.js, where user-controlled input can cause cross-site scripting. The vulnerability can be triggered remotely and has publicly disclosed...
CVE-2025-54475: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands...
Malicious code in js-base64-int (npm)
The package js-base64-int was found to contain malicious code...
Malicious code in js-sla3 (npm)
The package js-sla3 was found to contain malicious code...
Malicious code in orderly-js-sdk-remix-template (npm)
The package orderly-js-sdk-remix-template was found to contain malicious code...
Malicious code in uglify-js-pipe-transform-lightyear (npm)
The package uglify-js-pipe-transform-lightyear was found to contain malicious code...
Malicious code in adyen-cse-js-2mundos (npm)
The package adyen-cse-js-2mundos was found to contain malicious code...
Malicious code in ihm-js-coral-client (npm)
The package ihm-js-coral-client was found to contain malicious code...
Malicious code in simple-js-sha3-384 (npm)
The package simple-js-sha3-384 was found to contain malicious code...
Malicious code in @zalastax/nolb-_js_ (npm)
The package @zalastax/nolb-js was found to contain malicious code...
Malicious code in bellatrix-middleware-update-uglify-js (npm)
The package bellatrix-middleware-update-uglify-js was found to contain malicious code...
Malicious code in bigpicture-js (npm)
The package bigpicture-js was found to contain malicious code...
Malicious code in bunker-to-js (npm)
The package bunker-to-js was found to contain malicious code...
Malicious code in ctcommon-js (npm)
The package ctcommon-js was found to contain malicious code...