1429534 matches found
Erxes <0.23.0 - Cross-Site Scripting
Erxes before 0.23.0 contains a cross-site scripting vulnerability. The value of topicID parameter is not escaped and is triggered in the enclosing script tag. id: CVE-2021-32853 info: name: Erxes 0.23.0 - Cross-Site Scripting author: dwisiswant0 severity: critical description: Erxes before 0.23.0...
kkFileView 4.1.0 - Cross-Site Scripting
kkFileView 4.1.0 is susceptible to cross-site scripting via the url parameter at /controller/OnlinePreviewController.java. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...
Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting
Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...
ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API
changedetection.io = 0.50.34 contains a stored cross site scripting caused by insufficient security checks in the Watch update API, letting attackers execute arbitrary JavaScript when users preview malicious links, exploit requires user interaction id: CVE-2025-62780 info: name: ChangeDetection.i...
Node RED Dashboard <2.26.2 - Local File Inclusion
NodeRED-Dashboard before 2.26.2 is vulnerable to local file inclusion because it allows uibase/js/..%2f directory traversal to read files. id: CVE-2021-3223 info: name: Node RED Dashboard 2.26.2 - Local File Inclusion author: gy741,pikpikcu severity: high description: NodeRED-Dashboard before...
Letta Letta 0.7.12 - Remote Code Execution
Letta 0.7.12 is vulnerable to remote code execution via POST /v1/tools/run in letta.server.restapi.routers.v1.tools.runtoolfromsource, allowing attackers to execute arbitrary Python and OS commands via crafted tool source code. id: CVE-2025-51482 info: name: Letta Letta 0.7.12 - Remote Code...
CVE-2026-50288
CVE-2026-50288 affects @asymmetric-effort/specifyjs , a declarative TypeScript UI framework, prior to version 0.2.136 . The vulnerability resides in the assertSecureUrl function (core/src/shared/secure-fetch.ts:42-45). When new URL() throws a parse error, the catch block silently returned instead...
ROOT-APP-NPM-CVE-2026-14257 CVE-2026-14257 in brace-expansion - Patched by Root
Root has patched CVE-2026-14257 in the brace-expansion package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59874 CVE-2026-59874 in tar - Patched by Root
Root has patched CVE-2026-59874 in the tar package for Root:npm. Multiple fixed versions available...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.14-1.hum1 aarch64, x8664 python3.12-debug-3.12.14-1.hum1 aarch64, x8664 python3.12-devel-3.12.14-1.hum1 aarch64, x8664 python3.12-idle-3.12.14-1.hum1 aarch64, x8664...
CVE-2026-74582
In the Linux kernel, the following vulnerability has been resolved: p...
ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root
Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...
GHSA-RXHG-VCWW-2MPW
creationtimestamp| type| source ---|---|--- 2026-08-21 15:31:46+00:00| seen| https://gist.github.com/alon710/e119e0e3dc0dc9f08b09963cc2e8d5fb...
MINI-53MH-RG6X-J4H8
Bulletin has no description...
MINI-XP34-57G6-C8WM
Bulletin has no description...
MINI-H2C5-V32R-QR7F
Bulletin has no description...
MINI-HCXR-8XGX-XMFW
Bulletin has no description...
MINI-88JJ-M2Q2-GQ6R
Bulletin has no description...