Lucene search
+L

6 matches found

Cvelist
Cvelist
added 2026/04/17 8:49 p.m.26 views

CVE-2026-40299 next-intl has an open redirect vulnerability

next-intl provides internationalization for Next.js. Applications using the next-intl middleware prior to version 4.9.1with localePrefix: 'as-needed' could construct URLs where path handling and the WHATWG URL parser resolved a relative redirect target to another host e.g. scheme-relative // or...

6.9CVSS0.00339EPSS
Exploits0References4
OSV
OSV
added 2026/04/10 9:3 p.m.3 views

GHSA-8F24-V5VV-GM5J next-intl has an open redirect vulnerability

Impact Applications using the next-intl middleware with localePrefix: 'as-needed' could construct URLs where path handling and the WHATWG URL parser resolved a relative redirect target to another host e.g. scheme-relative // or control characters stripped by the URL parser, so the middleware coul...

6.9CVSS5.8AI score0.00339EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.7 views

PT-2025-51434

Name of the Vulnerable Software and Affected Versions Syed Balkhi All In One SEO Pack versions through 4.9.1 Description A flaw exists in Syed Balkhi All In One SEO Pack that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. Recommendations...

8.5CVSS7.5AI score0.00263EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/03/14 2:57 a.m.3 views

SUSE CVE-2025-24016

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and...

9.9CVSS8.2AI score0.9384EPSS
Exploits10References2
OSV
OSV
added 2024/06/21 11:8 a.m.4 views

OESA-2024-1750 python-lxml security update

The lxml XML toolkit is a Pythonic binding for the C libraries libxml2 and libxslt. \ It is unique in that it combines the speed and XML feature completeness of these libraries with \ the simplicity of a native Python API, mostly compatible but superior to the well-known ElementTree API. \ The...

9.1CVSS6.8AI score0.00532EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/06/03 12:0 a.m.12 views

PT-2023-18813 · Vcita · Contact Form Builder

Name of the Vulnerable Software and Affected Versions: Contact Form Builder by vcita plugin for WordPress versions up to, and including, 4.9.1 Description: The issue is related to Stored Cross-Site Scripting via the email parameter due to insufficient input sanitization and output escaping. This...

6.4CVSS5.8AI score0.0051EPSS
Exploits1References8
Rows per page
Query Builder