20945 matches found
USN-7399-1: RabbitMQ Server vulnerability
It was discovered that RabbitMQ Server's management UI did not sanitize certain input. An attacker could possibly use this issue to inject code by performing a cross-site scripting XSS attack...
FAST LTA Silent Brick WebUI 安全漏洞
The FAST LTA Silent Brick WebUI is a web-based user interface for a Silent Brick data storage system from FAST LTA. A security vulnerability exists in FAST LTA Silent Brick WebUI versions prior to 2.63, which stems from operating system command injection and could allow a remote attacker to execu...
CVE-2024-58129
In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...
CVE-2024-58128
In MISP before 2.4.193, menucustomrightlink parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks via a global menu link...
Malicious code in ui-driver-vultr (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2908 Malicious code in ui-driver-vultr (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2788 Malicious code in teleport-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c095dd595422be512b9e2f3a57d03c7a65553667c81b51fe163eb11fae8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in teleport-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c095dd595422be512b9e2f3a57d03c7a65553667c81b51fe163eb11fae8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2768 Malicious code in kaddex-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f347f71f4aaa1d161eda3bdcb1494331068aff9d830f7c93dcdc17c82462b7bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kaddex-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f347f71f4aaa1d161eda3bdcb1494331068aff9d830f7c93dcdc17c82462b7bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BIT-RABBITMQ-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI
RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...
Google Mesop 安全漏洞
Google Mesop is a Python-based UI framework from Google, Inc USA. A security vulnerability exists in Google Mesop versions prior to 0.14.1, which stems from class contamination could lead to a denial of service or other serious consequences...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2022-30615, CVE-2022-35642)
Summary A cross-site scripting vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-30615 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W...
Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulnerable to sensitive information exposure (CVE-2021-39087)
Summary IBM Sterling B2B Integrator dashboard UI has addressed a sensitive information exposure security vulnerability. Vulnerability Details CVEID:CVE-2021-39087 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive information due to...
Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulnerable to XSS (CVE-2021-39035)
Summary IBM Sterling B2B Integrator dashboard UI is vulnerable to cross-site scription XSS. The issue has been addressed. Vulnerability Details CVEID:CVE-2021-39035 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to...
The vulnerability of the Lite UI user interface library used in Apache ShardingSphere ElasticJob-UI for task scheduling arises from an internal index assignment error. This error allows attackers to gain unauthorized access to protected information.
The vulnerability of the Lite UI user interface library used in the Apache ShardingSphere ElasticJob-UI task scheduling software is related to an error in the assignment of the internal interface index. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
PT-2025-13172 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 14.9 through 17.8.6 GitLab EE versions 17.9 through 17.8.3 GitLab EE versions 17.10 through 17.10.1 Description: An issue was discovered in GitLab EE, where an input validation issue in the Harbor registry integration could...
CVE-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI
RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...
CVE-2025-30219
RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...
