138 matches found
CVE-2026-23516 CVAT vulnerable to XSS via skeleton SVG images
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is able to execute arbitrary JavaScript in a victim user's CVAT UI session, provided that they are able to create a maliciously crafted label in a CVAT task or...
EUVD-2026-3774
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is able to execute arbitrary JavaScript in a victim user's CVAT UI session, provided that they are able to create a maliciously crafted label in a CVAT task or...
CVE-2026-23516 CVAT vulnerable to XSS via skeleton SVG images
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is able to execute arbitrary JavaScript in a victim user's CVAT UI session, provided that they are able to create a maliciously crafted label in a CVAT task or...
MAL-2025-48791 Malicious code in ads-skeleton (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ads-skeleton (npm)
--- -= Per source details. Do not edit below this line.=-...
EUVD-2014-8577
Malware in sbrugna...
EUVD-2023-41517
Malicious code in bioql PyPI...
EUVD-2023-44777
Malicious code in bioql PyPI...
EUVD-2023-1033
Malicious code in bioql PyPI...
NewStart CGSL MAIN 6.06 : chrony Multiple Vulnerabilities (NS-SA-2025-0212)
The remote NewStart CGSL host, running version MAIN 6.06, has chrony packages installed that are affected by multiple vulnerabilities: - chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to...
Malicious code in @espace-client-axafr/skeleton (npm)
The package communicates with a domain associated with malicious activity...
io.airlift:discovery (=324), io.airlift:http-client (=324) +13 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.1.0.alpha0 <=12.1.0.beta2)
org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.1.0.alpha0, =12.1.0.alpha2, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.beta2 Source cves: CVE-2025-5115 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-12047664...
Malicious code in @avoc-analytics-skeleton-monorepo/log (npm)
The package @avoc-analytics-skeleton-monorepo/log was found to contain malicious code...
MAL-2025-7100 Malicious code in @avoc-analytics-skeleton-monorepo/config (npm)
The package @avoc-analytics-skeleton-monorepo/config was found to contain malicious code...
MAL-2025-7099 Malicious code in @avoc-analytics-skeleton-monorepo/auth (npm)
The package @avoc-analytics-skeleton-monorepo/auth was found to contain malicious code...
Malicious code in @avoc-analytics-skeleton-monorepo/auth (npm)
The package @avoc-analytics-skeleton-monorepo/auth was found to contain malicious code...
MAL-2025-7101 Malicious code in @avoc-analytics-skeleton-monorepo/log (npm)
The package @avoc-analytics-skeleton-monorepo/log was found to contain malicious code...
Malicious code in @avoc-analytics-skeleton-monorepo/config (npm)
The package @avoc-analytics-skeleton-monorepo/config was found to contain malicious code...
