28428 matches found
CVE-2025-14403
PDFsam Enhanced Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
CVE-2025-14402 PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution Vulnerability
PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2025-68480 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, ggshield...
GHSA-428G-F7CQ-PGP5 vulnerabilities
Vulnerabilities for packages: ggshield, superset, airflow, py3-marshmallow, airflow-core, open-webui...
Malicious Package
Overview mws-common-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-204880
Malicious code in @aa-techops-ui/ping-authentication npm...
Malicious code in jz-ui-user (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83849bf539335824cd90b4dfa14f83dd1e644e9cf22805417940ec3b7ad3a7af The package jz-ui-user was found to contain malicious code...
MAL-2025-192818 Malicious code in jz-ui-user (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83849bf539335824cd90b4dfa14f83dd1e644e9cf22805417940ec3b7ad3a7af The package jz-ui-user was found to contain malicious code...
CVE-2025-14403: Product UI does not Warn User of Unsafe Actions
PDFsam Enhanced Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
CVE-2025-14415: Product UI does not Warn User of Unsafe Actions
Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2025-68645
A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...
CVE-2025-68645: Improper Control of Filename for Include/Require Statement in PHP Program
A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...
CVE-2025-68645
A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...
CVE-2025-68645
A Local File Inclusion (LFI) vulnerability exists in the Zimbra Collaboration Suite (ZCS) 10.0.x (prior to 10.0.18) and 10.1.x (prior to 10.1.13) Classic Webmail UI. The flaw is caused by improper input validation and path normalization in the RestFilter servlet , specifically when handling the j...
CVE-2025-68645
A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...
CVE-2025-67849
A flaw was found in Moodle. This cross-site scripting XSS vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface...
CVE-2025-63391
An authentication bypass vulnerability exists in Open-WebUI =0.6.32 in the /api/config endpoint. The endpoint lacks proper authentication and authorization controls, exposing sensitive system configuration data to unauthenticated remote attackers...
PT-2026-31516
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A security flaw in the Omnibox user interface within Google Chrome on iOS, prior to version 147.0.7727.55, could be exploited by a remote attacker to conduct UI spoofing through a...
Cross-site Scripting (XSS)
Overview Kentico.Xperience.Libraries.Web.UI is a runtime assemblies for Web Forms applications that use Kentico Xperience API Affected versions of this package are vulnerable to Cross-site Scripting XSS via the SaveUserSpecificDashboardSettings method in the UserSettingsJsonDashboardItemsLoader...