5002 matches found
Liferay Portal和Liferay DXP 跨站脚本漏洞
Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...
PT-2025-40966
Name of the Vulnerable Software and Affected Versions Kibana versions 5.3 through 8.7 Description Several cross-site scripting XSS issues have been disclosed by Elastic in Kibana. These issues could potentially allow for malicious code execution within the application. A search on Netlas.io using...
a2a-client-handler (=0.1.0), aa-rag (>=0.1.0 <=0.4.3) +1316 more potentially affected by CVE-2025-6985 via langchain-text-splitters (>=0.0.1 <=0.3.8)
langchain-text-splitters PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0, =0.1.0b0, =0.0.1, =4.8.2, =0.0.1a1, =0.1.0, =0.1.0, =1.0.0rc1, =3.2.0, =0.1.0, =0.1.3 and more Source cves: CVE-2025-6985 Source advisory: OSV:GHSA-M42M-M8CR-8M58...
CVE-2025-36356
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required...
CVE-2025-36355
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...
CVE-2025-36356
CVE-2025-36356 affects IBM Security Verify Access and IBM Security Verify Access Docker (versions 10.0.0.0–10.0.9.0 and 11.0.0.0–11.0.1.0). The vulnerability arises from execution with more privileges than required, allowing a locally authenticated user to escalate to root. Public exploitation de...
CVE-2025-61680 Minecraft RCON Terminal: Plain Text Password Storage in Configuration
Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0...
EUVD-2025-7949
Malicious code in bioql PyPI...
EUVD-2024-40590
Malicious code in bioql PyPI...
EUVD-2025-30587
Malicious code in bioql PyPI...
EUVD-2025-26944
Malicious code in bioql PyPI...
EUVD-2022-42715
Malicious code in bioql PyPI...
EUVD-2025-26427
Malicious code in bioql PyPI...
EUVD-2025-29020
Malicious code in bioql PyPI...
EUVD-2025-23354
Malicious code in bioql PyPI...
EUVD-2024-49318
Malicious code in bioql PyPI...
EUVD-2025-24866
Malicious code in bioql PyPI...
EUVD-2025-30611
Malicious code in bioql PyPI...