41683 matches found
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting
PKP Open Journal Systems 2.4.8 to 3.3 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary code via the X-Forwarded-Host Header. id: CVE-2022-24181 info: name: PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting author: lucasljm2001,ekrause severit...
Kaseya Virtual System Administrator - Open Redirect
Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. id: CVE-2015-286...
Malicious code in simple-date-formatter-util-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71be7a588ae717e33fc9fe98c246a1037e8a38d385a18104a5c0fe8ff1f659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-M4P7-R5RC-7G4J vulnerabilities
Vulnerabilities for packages: superset, mlflow...
CVE-2026-59884 vulnerabilities
Vulnerabilities for packages: wazuh-manager, superset, datahub-ingestion, mlflow...
CVE-2026-67338
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...
CVE-2026-67320
axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a common immutable interceptor pattern such as ...config or...
MAL-2026-11477 Malicious code in refbase-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 315ac36b49a01221dde71396930996c607eeef7737c9d2dafae5bdc8daf09f58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11472 Malicious code in mcp-server-boilerplate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e3c940b9fc50ad864429da89bf924d2bd1c0253ac8bde66b0b82643260eb51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-53669 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-94P4-4CQ8-9G67 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-VJC4-5QP5-M44J vulnerabilities
Vulnerabilities for packages: superset, mlflow...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...
GHSA-5F52-PX6M-C5HW vulnerabilities
Vulnerabilities for packages: wget...
GHSA-CHX6-HX7R-MCP5 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-FXF9-RXPJ-26GX vulnerabilities
Vulnerabilities for packages: wget...