CVE-2026-102638

A maliciously crafted HTML payload in the description of an electronic library .lbr file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage thi...

EUVD-2026-111139

A maliciously crafted HTML payload in the description of an electronic library .lbr file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage thi...

CVE-2026-102638

The Autodesk Fusion desktop application is vulnerable to a Stored Cross-site Scripting (XSS) vulnerability. The issue is triggered when a maliciously crafted HTML payload within the description of an electronic library (.lbr) file is displayed in the Library Manager after the library is imported....

CVE-2026-102638 Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop

A maliciously crafted HTML payload in the description of an electronic library .lbr file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage thi...

PT-2026-126651

A maliciously crafted HTML payload in the description of an electronic library .lbr file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage thi...

Autodesk Fusion cross-site scripting vulnerability

Autodesk Fusion versions from 2705.1.30 up to and including 2706.1.14 contain a cross-site scripting vulnerability. This vulnerability arises because a specially crafted HTML payload within the description of an .lbr library file is displayed in the Library Manager after the library is imported,...

CVE-2025-45145

Directory traversal in Follett Software's Destiny Library Manager 2202rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter...

CVE-2025-45145

Directory traversal in Follett Software's Destiny Library Manager 2202rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter...

CVE-2025-45145: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in Follett Software's Destiny Library Manager 2202rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter...

CVE-2025-45145

Directory traversal in Follett Software's Destiny Library Manager 2202rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter...

CVE-2025-45145

Directory traversal in Follett Software's Destiny Library Manager 2202rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter...

CVE-2025-45145

Directory traversal in Follett Software's Destiny Library Manager 2202rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter...

CVE-2025-45145

Follett Software's Destiny Library Manager (a school library resource and collection management system) contains a directory traversal vulnerability in version 22_0_2_rc1 . Remote attackers can exploit this flaw via the image parameter to read arbitrary system and application files. The issue has...

PT-2026-42770

Directory traversal in Follett Software's Destiny Library Manager 22 0 2 rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter...

EUVD-2025-209923

Directory traversal in Follett Software's Destiny Library Manager 2202rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter...

Follett Destiny Library Manager security vulnerability

Follett Destiny Library Manager is a school library resource and collection management system developed by the Follett company in the United States. The version 2202rc1 of Follett Destiny Library Manager contains security vulnerabilities. These vulnerabilities are due to directory traversal...

EUVD-2019-4993

Malware in sbrugna...

EUVD-2023-55073

Malicious code in bioql PyPI...

EUVD-2025-10540

Malicious code in bioql PyPI...

CVE-2019-13538

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source...