25 matches found
CVE-2025-52219
SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability. Legacy UI fields can be used to create arbitrary external links via HTML Injection...
Malicious code in Be.Vlaanderen.Basisregisters.PаrcеlRegistry.Api.Legacy (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlаanԁeren.Basisregisters.AddressRegistry.Apі.Legaсy (NuGet)
--- -= Per source details. Do not edit below this line.=-...
PT-2023-20331
Name of the Vulnerable Software and Affected Versions OpenTSDB versions prior to 2.4.2 Description Insufficient validation of parameters passed to the legacy HTTP query API allows the injection of crafted OS commands into multiple parameters. This enables the execution of malicious code on the ho...
Mozilla: Memory corruption with malicious NPAPI plugin (MFSA 2016-31)
The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service invalid pointer dereference and memory corruption via a crafted NPAPI plug...