GHSA-9MVC-8737-8J8H vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-26721

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter...

CVE-2026-26723

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the function parameter...

CVE-2026-26722

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality...

CVE-2026-26721

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter...

CVE-2026-26722

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality...

CVE-2026-26723

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the function parameter...

CVE-2026-26724

Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint...

MAL-2026-973 Malicious code in veim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31b89b91cb42611b74a7be2b2f6da42d03473a69e463276f87761d0ede8c71c The package veim was found to contain malicious code. Source: ghsa-malware e9f54d28eecf643750d870dc5e02deec7b66e42cdc998c589c6de0e58341bc47 Any...

MAL-2026-958 Malicious code in ethres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3cafe0e65ebbd1b4bdd577f7277b921eb7e3cf52e5fb46d8e6f6f34b2debd5 The package ethres was found to contain malicious code. Source: ghsa-malware 10924cf4fae0e118a99b95cf45376a7f42ff743f1e8830e78e801c473e0ddd88 Any...

Malicious code in claud-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858992810c1a4133d95b6fa19033c07591db548a46df39b67e0d393d7dd212ad The package claud-code was found to contain malicious code. Source: ghsa-malware 5fe9842d778d45ad5b5e4d81db678d608711dd4b186e053569dae6f210481651 Any...

CVE-2025-67987

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through = 10.3.1...

CVE-2025-67987 WordPress Quiz And Survey Master plugin <= 10.3.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through = 10.3.1...

GHSA-RRXV-PMQ9-X67R vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2026-26996 vulnerabilities

Vulnerabilities for packages: argo-workflows, serve, sqlpad, lerna, node-gyp, saf, kubeflow-pipelines, npm, kubeflow-centraldashboard, opensearch-dashboards, renovate, code-server, langfuse, tileserver-gl, eslint, jupyter-base-notebook, pulumi, ts-patch, pnpm-stage0, rancher-api-ui, prism,...

CVE-2026-27017 vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-9C88-49P5-5GGF vulnerabilities

Vulnerabilities for packages: kibana, gemini-cli...

CVE-2026-26721

The Key Systems Inc Global Facilities Management Software (version 20230721a ) is vulnerable to an issue where a remote attacker can obtain sensitive information . The vulnerability is caused by the use of the sid query parameter within an affected API endpoint , specifically through the use of t...

CVE-2026-26721

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter...

Key Systems Global Facilities Management Software 安全漏洞

Key Systems Global Facilities Management Software is a facilities management system developed by the American company Key Systems. Version 20230721a of Key Systems Global Facilities Management Software contains a security vulnerability. This vulnerability stems from issues with the sid query...