319621 matches found
WS-2017-0204
Affected versions of the package are vulnerable to Man in the Middle MitM attacks...
WS-2017-0121
Affected versions of the package are vulnerable to Arbitrary Code Execution via unsafe svg animation tags...
WS-2017-0112
Affected versions of the package are vulnerable to a Denial of Service attack sending an OPTIONS request for an undefined route...
WS-2017-0200
Affected versions of the package are vulnerable to Cross-site Scripting XSS which is caused by Double-Clobbering...
WS-2017-0246
Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...
WS-2017-0240
Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...
WS-2017-0221
Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...
WS-2017-0254
Affected versions of the package before 2.5.5, and 2.6.0 are vulnerable to Arbitrary Method Invocation...
WS-2014-0002
Hidden Directories Always Served.The inert directory handler always allows files in hidden directories to be served, even when showHidden is false...
Linux Distros Unpatched Vulnerability : CVE-2026-8390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3. CVE-2026-8390 Note that Nessus relies on the presence ...
PLANET IGS-5225-8P2T4S Code Debugging Privilege Escalation
The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial control switches is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code and enhance their privileges...
Amazon Linux 2 : oci-add-hooks, --advisory ALAS2ECS-2026-112 (ALASECS-2026-112)
The version of oci-add-hooks installed on the remote host is prior to 0-0.9.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-112 advisory. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...
CVE-2026-26191: Improper Neutralization of Special Elements used in an OS Command
Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute arbitrary commands as root macOS/Linux or SYSTEM Windows on managed endpoints when an uninstall is triggered. When a...
CVE-2025-69443
Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all Archon information available on the UI including API keys...
GitLab security vulnerabilities
GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD continuous integration and delivery. There were security vulnerabilities in versions prior to GitLab EE...
Schneider Electric Ecostruxure Machine Expert HVAC security vulnerabilities
Schneider Electric Ecostruxure Machine Expert HVAC is a software platform developed by Schneider Electric, a French company, dedicated to the control and automation of heating, ventilation, and air conditioning equipment. Schneider Electric Ecostruxure Machine Expert HVAC has a security...
amazon-ssm-agent-3.3.4268.0-2.1 on GA media (moderate)
amazon-ssm-agent-3.3.4268.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10765-1 Rating: moderate Cross-References: CVE-2026-41506 CVSS scores: CVE-2026-41506 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2026-41506 SUSE : 7.1...
WS-2017-0148
Affected versions of the package are vulnerable to Cross-site Scripting XSS due to using a non-cryptographic hash map to store connection IDs...