WS-2017-0179

Affected versions of the package are vulnerable to mass assignment on environment extensions...

WS-2017-0176

Affected versions of the package are vulnerable to Arbitrary code execution...

WS-2017-0177

Affected versions of the package are vulnerable to Denial of Service DoS...

WS-2017-0227

Affected versions of the package are vulnerable to Cross-site Scripting XSS...

WS-2017-0204

Affected versions of the package are vulnerable to Man in the Middle MitM attacks...

WS-2017-0121

Affected versions of the package are vulnerable to Arbitrary Code Execution via unsafe svg animation tags...

WS-2017-0112

Affected versions of the package are vulnerable to a Denial of Service attack sending an OPTIONS request for an undefined route...

WS-2017-0200

Affected versions of the package are vulnerable to Cross-site Scripting XSS which is caused by Double-Clobbering...

WS-2017-0246

Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...

WS-2017-0240

Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...

WS-2017-0221

Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the eval function...

WS-2017-0254

Affected versions of the package before 2.5.5, and 2.6.0 are vulnerable to Arbitrary Method Invocation...

WS-2014-0002

Hidden Directories Always Served.The inert directory handler always allows files in hidden directories to be served, even when showHidden is false...

CVE-2025-69443

Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all Archon information available on the UI including API keys...

GitLab security vulnerabilities

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD continuous integration and delivery. There were security vulnerabilities in versions prior to GitLab EE...

CVE-2026-26191: Improper Neutralization of Special Elements used in an OS Command

Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute arbitrary commands as root macOS/Linux or SYSTEM Windows on managed endpoints when an uninstall is triggered. When a...

Schneider Electric Ecostruxure Machine Expert HVAC security vulnerabilities

Schneider Electric Ecostruxure Machine Expert HVAC is a software platform developed by Schneider Electric, a French company, dedicated to the control and automation of heating, ventilation, and air conditioning equipment. Schneider Electric Ecostruxure Machine Expert HVAC has a security...

amazon-ssm-agent-3.3.4268.0-2.1 on GA media (moderate)

amazon-ssm-agent-3.3.4268.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10765-1 Rating: moderate Cross-References: CVE-2026-41506 CVSS scores: CVE-2026-41506 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2026-41506 SUSE : 7.1...

PLANET IGS-5225-8P2T4S Code Debugging Privilege Escalation

The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial control switches is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code and enhance their privileges...

Amazon Linux 2 : oci-add-hooks, --advisory ALAS2ECS-2026-112 (ALASECS-2026-112)

The version of oci-add-hooks installed on the remote host is prior to 0-0.9.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-112 advisory. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...