36998 matches found
EUVD-2026-27688
In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlmsearchrsbtree The len parameter in dlmdumprsbname is not validated and comes from network messages. When it exceeds DLMRESNAMEMAXLEN, it can cause out-of-bounds write in dlmsearchrsbtree. Add length...
CVE-2026-43125
In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlmsearchrsbtree The len parameter in dlmdumprsbname is not validated and comes from network messages. When it exceeds DLMRESNAMEMAXLEN, it can cause out-of-bounds write in dlmsearchrsbtree. Add length...
CVE-2026-42038 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, saf, langfuse, kubeflow-centraldashboard, prism, kubeflow-katib, jitsucom-jitsu, lerna, nextcloud-server...
CVE-2026-6788: Uncontrolled Search Path Element
Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files...
Rucio SQL注入漏洞
Rucio is an open-source scientific data management tool developed by Rucio team. Rucio has a SQL injection vulnerability, which stems from the SQL injection in the FilterEngine.createsqlaquery method. This vulnerability allows any authenticated Rucio user to execute arbitrary SQL queries against...
PT-2026-38087
Name of the Vulnerable Software and Affected Versions Rucio versions 1.30.0 through 35.8.4 Rucio versions 38.x through 38.5.4 Rucio versions 39.x through 39.4.1 Rucio versions 40.x through 40.1.0 Description An issue exists in the FilterEngine.create postgres query function where authenticated...
Johnson Controls AC2000 代码问题漏洞
Johnson Controls AC2000 is an enterprise-level access control and security management system developed by Johnson Controls. There is a code vulnerability in Johnson Controls AC2000, which stems from uncontrolled search path elements, potentially allowing the search path in configuration files to ...
The vulnerability of the `system.run` command in the OpenClaw AI-agent (formerly known as ClawdBot or MoltBot) allows a attacker to execute arbitrary commands.
The vulnerability of the system.run command in the OpenClaw AI-agent formerly known as ClawdBot or MoltBot is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2026-37647
Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.This issue affects WatchGuard Agent before 1.25.03.0000...
PT-2026-37659
Name of the Vulnerable Software and Affected Versions JohnsonControls AC2000 versions 10.6 through 10 JohnsonControls AC2000 versions 11.0 through 9 JohnsonControls AC2000 versions 12 through 3 Description An uncontrolled search path element issue allows for the manipulation of configuration file...
CVE-2026-8011: Protection Mechanism Failure
Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-21661: Uncontrolled Search Path Element
An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths. This issue affects AC2000: from 10.6 before release 10, from 11.0 before release 9, from 12 before release 3...
WatchGuard Agent 代码问题漏洞
WatchGuard Agent is a terminal security protection and device management agent provided by the American company WatchGuard. Versions of WatchGuard Agent prior to 1.25.03.0000 contained a code vulnerability caused by uncontrolled search path elements, which could lead to the use of malicious files...
EUVD-2023-60574
AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...
CVE-2023-54349
AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...
CVE-2023-54349
AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...
CVE-2023-54349 AmazCart CMS 3.4 Reflected Cross-Site Scripting via Search
AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...
CVE-2023-54349
AmazCart CMS 3.4 is affected by a reflected cross-site scripting (XSS) vulnerability in the search functionality. The issue allows unauthenticated attackers to inject arbitrary JavaScript by submitting payloads in the search input, with scripts potentially executing when search results or history...
CVE-2023-54349 AmazCart CMS 3.4 Reflected Cross-Site Scripting via Search
AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...
