Lucene search
+L

2073 matches found

Snyk
Snyk
•added 2025/09/17 7:43 p.m.•12 views

Origin Validation Error

Overview @parcel/reporter-dev-server is a Blazing fast, zero configuration web application bundler Affected versions of this package are vulnerable to Origin Validation Error via improper origin validation in the development server. An attacker can access source code by tricking a developer into...

6.5CVSS6.5AI score0.00236EPSS
SaveExploits1References2
NVD
NVD
•added 2025/09/17 7:15 p.m.•14 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

6.5CVSS0.00236EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/09/17 12:00 a.m.•26 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

0.00236EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•2 views

CVE-2025-56648: Origin Validation Error

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

6.5CVSS5.8AI score0.00236EPSS
SaveExploits1References1
CVE
CVE
•added 2025/09/17 12:00 a.m.•42 views

CVE-2025-56648

The parcel build tool (versions 2.0.0-alpha and before, as well as 1.6.1 and above) contains an Origin Validation Error vulnerability. This flaw allows malicious websites to send XMLHTTPRequests to a developer's application development server, which can result in the theft of source code when a d...

6.5CVSS6.8AI score0.00236EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/17 12:00 a.m.•5 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

6.8AI score0.00236EPSS
SaveExploits1References4
OSV
OSV
•added 2025/09/17 12:00 a.m.•13 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

6.5CVSS7.2AI score
SaveExploits0References6
Snyk
Snyk
•added 2025/09/16 12:45 p.m.•3 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade thunderbird to version 143.0 or higher...

8.8CVSS7.4AI score0.00302EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/16 12:45 p.m.•6 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox to version 143.0 or higher...

8.8CVSS7.4AI score0.00302EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/16 12:45 p.m.•4 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox-ESR to version 140.3 or higher...

8.8CVSS7.4AI score0.00302EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/16 12:45 p.m.•5 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade thunderbird-ESR to version 140.3 or...

8.8CVSS7.4AI score0.00302EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/16 4:47 a.m.•14 views

Security Bulletin: IBM App Connect Enterprise Toolkit and Intregation Bus for z/OS Toolkit are vulnerable to an Origin Validation Error due to Paho Java Client ( CVE-2019-11777 )

Summary IBM App Connect Enterprise Toolkit and Intregation Bus for z/OS Toolkit are vulnerable to an Origin Validation Error due to Paho Java Client. Vulnerability Details CVEID:CVE-2019-11777 DESCRIPTION: In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server...

7.5CVSS6.5AI score0.00834EPSS
SaveExploits0Affected Software2
CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•17 views

PHPGurukul Student Result Management System 安全漏洞

Student Result Management System Using PHP is a student result management system. A cross-site request forgery vulnerability exists in Student Result Management System Using PHP, which stems from a Profile Page that does not adequately validate that a request is coming from a trusted user, no...

7.3CVSS6.6AI score0.00196EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/12 3:32 p.m.•8 views

Security Bulletin: IBM Security SOAR is using a component with a known vulnerabilities [CVE-2024-57965, CVE-2025-27152]

Summary IBM Security SOAR uses an older version of axios that may be identified and exploited. Updates for supported versions have been released which address the issues. It is recommended customers upgrade to the latest applicable fix pack 51.0.7.0 Vulnerability Details CVEID:CVE-2024-57965...

9.8CVSS6.7AI score0.00792EPSS
SaveExploits1Affected Software1
Snyk
Snyk
•added 2025/09/11 11:26 p.m.•6 views

Origin Validation Error

Overview mcp-neo4j-cypher is an A simple Neo4j MCP server Affected versions of this package are vulnerable to Origin Validation Error via the lack of proper origin validation in the server's request handling. An attacker can execute unauthorized tool invocations against locally running instances ...

7.4CVSS6.8AI score0.00221EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/10 7:44 p.m.•7 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the Mojo process. An attacker can bypass site isolation protections by enticing a user to visit a specially crafted HTML page. Remediation Upgrade chromium to version 140.0.7339.127 or higher. References -...

8.8CVSS6.6AI score0.00258EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/05 1:28 p.m.•10 views

CVE-2024-13068

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing.This issue affects LimonDesk: from s1.02.14 before v1.02.17...

7.3CVSS7AI score0.00154EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/04 12:30 p.m.•23 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/03 2:15 p.m.•7 views

CVE-2024-13068

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

7.3CVSS0.00154EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/03 1:12 p.m.•2 views

CVE-2024-13068 Host Header Injection in Akinsoft's LimonDesk

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

7.3CVSS5.8AI score0.00154EPSS
SaveExploits0References2
Rows per page
Query Builder