Lucene search
K

12 matches found

Github Security Blog
Github Security Blog
added 4 days ago10 views

React Router vulnerable to Denial of Service via reflected user input in single-fetch

A DoS vulnerability exists in the React Router v7 Framework Mode, as well as Remix v2.9.0+ with Single Fetch enabled. In some scenarios the underlying serialization algorithm can become a bottleneck when encoding specific types of data into server responses. Please upgrade to React Router v7.14.0...

7.5CVSS5.8AI score0.00042EPSS
Exploits0References6Affected Software2
OSV
OSV
added 2026/05/21 8:9 a.m.2 views

CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00054EPSS
Exploits0References31
OSV
OSV
added 2024/08/06 4:16 a.m.15 views

CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

7.5CVSS7AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/08/01 12:0 a.m.9 views

Atlassian Confluence 7.14.0 < 7.19.8 < Remote Code Execution

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.1.0 prior to 7.13.20, 6.1.0 prior to 7.19.8 or 6.1.0 prior to 8.2.0. It is, therefore, affected by a Remote Code Execution flaw which permits remote attackers to execute arbitary co...

8.8CVSS8.3AI score0.05149EPSS
Exploits0References2
NVD
NVD
added 2023/05/01 5:15 p.m.14 views

CVE-2023-22503

Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Confluence space. This occurs via an Information Disclosure vulnerability in the macro preview feature. This vulnerability was reported by Roj...

5.3CVSS5.1AI score0.00501EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/05/01 4:0 p.m.9 views

CVE-2023-22503

Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Confluence space. This occurs via an Information Disclosure vulnerability in the macro preview feature. This vulnerability was reported by Roj...

5.3CVSS6.7AI score0.00501EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/01/11 12:0 a.m.46 views

Kibana 7.14.0 HTML Injection

According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...

7.2CVSS5.4AI score0.00686EPSS
Exploits0References5
Atlassian
Atlassian
added 2022/12/01 6:59 a.m.241 views

An Atlassian product has a security vulnerability.

Affected versions of Atlassian Confluence Server allow remote authenticated attackers to view sensitive information in the hidden attachments of custom content on reindexing via an Information Disclosure vulnerability in the search page. The affected versions are before version 7.13.12, from...

4AI score
Exploits0
OpenVAS
OpenVAS
added 2021/09/27 12:0 a.m.16 views

Elastic Kibana Code Execution Vulnerability (ESA-2021-21)

Elastic Kibana is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...

7.2CVSS7.3AI score0.00178EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/09/27 12:0 a.m.25 views

Elastic Kibana HTML Injection Vulnerability (ESA-2021-23)

Elastic Kibana is prone to an HTML injection vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...

5.4CVSS5.7AI score0.00686EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/09/27 12:0 a.m.35 views

Elastic Kibana Node.js Security Vulnerabilities (ESA-2021-24)

Elastic Kibana is prone to multiple vulnerabilities in Node.js. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...

9.8CVSS7.6AI score0.00662EPSS
Exploits3References1
Cvelist
Cvelist
added 2019/12/17 8:55 p.m.13 views

CVE-2019-17337 TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting

The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting XSS attack. Affected releases are TIBCO Software Inc.'...

8.1CVSS5.4AI score0.00322EPSS
Exploits0References2
Rows per page
Query Builder