6644 matches found
CVE-2024-28042
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Center...
CVE-2024-26024
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in Substation Server...
CVE-2024-53755
Cross-Site Request Forgery CSRF vulnerability in Andrea Pernici Third Party Cookie Eraser third-party-cookie-eraser allows Stored XSS.This issue affects Third Party Cookie Eraser: from n/a through = 1.0.2...
Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open-Source Software (OSS) components
Summary There are vulnerabilities in multiple Open-Source Software OSS components consumed by IBM Planning Analytics Workspace. These issues have been addressed in IBM Planning Analytics Workspace by upgrading or removing the vulnerable libraries. Please refer to the table in the Related...
Cross-site Scripting (XSS)
pscontactinfo is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of formatted addresses, which allows stored script execution when combined with third-party modules...
DNS Dangling Record
Deploying web applications often require developers or system administrators to configure DNS records to target a third party service. Most common scenarios include to either configure a canonical name record CNAME or to declare specific name server records NS to delegate a specific DNS zone...
CVE-2024-12740
Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...
CVE-2024-12740
CVE-2024-12740 affects NI Vision software (Vision Development Module, Vision Assistant, Vision Builder AI) via a third‑party image-processing library. The concrete issue is in parsing JPG files (Vision Assistant/VBAI) leading to out-of-bounds/write conditions that allow remote code execution. Exp...
CVE-2024-12740 Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software
Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...
CVE-2024-12740 Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software
Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...
PT-2025-1943 · National Instruments · Ni Vision Builder Ai +1
Name of the Vulnerable Software and Affected Versions: NI Vision Builder AI affected versions not specified NI Vision Development Module affected versions not specified Description: The issue is related to the use of a third-party library for image processing in NI's vision software, which expose...
Texas scrutinizes four more car manufacturers on privacy issues (updated)
The Texas Attorney General’s Office has started an investigation into how Ford, Hyundai, Toyota, and Fiat Chrysler collect, share, and sell consumer data, expanding an earlier probe launched last year into how modern automakers are potentially using customer driving data. We've addressed cars and...
New Research: The State of Web Exposure 2025
Are your websites leaking sensitive data? New research reveals that 45% of third-party apps access user info without proper authorization, and 53% of risk exposures in Retail are due to the excessive use of tracking tools. Learn how to uncover and mitigate these hidden threats and risks—download...
CVE-2025-23087
A flaw was found in Node.js. This vulnerability allows potential exposure to unaddressed software vulnerabilities via the continued use of End-of-Life EOL versions that no longer receive security updates or patches. Mitigation Mitigation for this issue is either not available or the currently...
GHSA-35PQ-7PV2-2RFW ps_contactinfo has a potential XSS due to usage of the nofilter tag in template
Impact This can not be exploited in a fresh install of PrestaShop, only shops made vulnerable by third party modules are concerned. For example, if your shop has a third party module vulnerable to SQL injections, then pscontactinfo might execute a stored XSS in FO. Patches The long term fix is to...
ps_contactinfo has a potential XSS due to usage of the nofilter tag in template
Impact This can not be exploited in a fresh install of PrestaShop, only shops made vulnerable by third party modules are concerned. For example, if your shop has a third party module vulnerable to SQL injections, then pscontactinfo might execute a stored XSS in FO. Patches The long term fix is to...
CVE-2025-24027 ps_contactinfo has potential XSS due to usage of the nofilter tag in template
pscontactinfo, a PrestaShop module for displaying store contact information, has a cross-site scripting XSS vulnerability in versions up to and including 3.3.2. This can not be exploited in a fresh install of PrestaShop, only shops made vulnerable by third party modules are concerned. For example...
CVE-2025-24027
CVE-2025-24027 concerns the PrestaShop module ps_contactinfo . The vulnerability is a cross-site scripting (XSS) flaw affecting versions up to and including 3.3.2, arising when formatted addresses stored in the database are displayed. Exploitation is described as possible only in shops already vu...
CVE-2025-24027 ps_contactinfo has potential XSS due to usage of the nofilter tag in template
pscontactinfo, a PrestaShop module for displaying store contact information, has a cross-site scripting XSS vulnerability in versions up to and including 3.3.2. This can not be exploited in a fresh install of PrestaShop, only shops made vulnerable by third party modules are concerned. For example...