WS-2017-0180

Affected versions of the package are vulnerable to Cross-Site Request Forgery CSRF attacks...

WS-2017-0179

Affected versions of the package are vulnerable to mass assignment on environment extensions...

WS-2017-0177

Affected versions of the package are vulnerable to Denial of Service DoS...

WS-2017-0176

Affected versions of the package are vulnerable to Arbitrary code execution...

WS-2017-0227

Affected versions of the package are vulnerable to Cross-site Scripting XSS...

WS-2017-0204

Affected versions of the package are vulnerable to Man in the Middle MitM attacks...

WS-2017-0121

Affected versions of the package are vulnerable to Arbitrary Code Execution via unsafe svg animation tags...

WS-2017-0112

Affected versions of the package are vulnerable to a Denial of Service attack sending an OPTIONS request for an undefined route...

WS-2017-0200

Affected versions of the package are vulnerable to Cross-site Scripting XSS which is caused by Double-Clobbering...

WS-2017-0246

Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...

WS-2017-0240

Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...

WS-2017-0221

Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...

WS-2017-0254

Affected versions of the package before 2.5.5, and 2.6.0 are vulnerable to Arbitrary Method Invocation...

WS-2014-0002

Hidden Directories Always Served.The inert directory handler always allows files in hidden directories to be served, even when showHidden is false...

PLANET IGS-5225-8P2T4S Code Debugging Privilege Escalation

The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial control switches is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code and enhance their privileges...

CVE-2025-69443

Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all Archon information available on the UI including API keys...

GitLab security vulnerabilities

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD continuous integration and delivery. There were security vulnerabilities in versions prior to GitLab EE...

Linux Distros Unpatched Vulnerability : CVE-2026-8390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3. CVE-2026-8390 Note that Nessus relies on the presence ...

amazon-ssm-agent-3.3.4268.0-2.1 on GA media (moderate)

amazon-ssm-agent-3.3.4268.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10765-1 Rating: moderate Cross-References: CVE-2026-41506 CVSS scores: CVE-2026-41506 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2026-41506 SUSE : 7.1...

CVE-2026-26191: Improper Neutralization of Special Elements used in an OS Command

Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute arbitrary commands as root macOS/Linux or SYSTEM Windows on managed endpoints when an uninstall is triggered. When a...