Lucene search
K

6 matches found

CNNVD
CNNVD
added 2026/05/13 12:0 a.m.12 views

Next.js 安全漏洞

Next.js is a React framework open source by Vercel. Versions of Next.js from 10.0.0 to 15.5.16, as well as versions before 16.2.5, have security vulnerabilities. These vulnerabilities arise from the default image loader being hosted on the server, where the Image Optimization API loads local imag...

5.9CVSS5.8AI score0.00705EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2026/02/24 11:11 a.m.7 views

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0 <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8 <=3.1.14-jdk17) +192 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (>=10.0.0 <=26.5.5)

org.keycloak:keycloak-services MAVEN version =10.0.0, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.4.11 - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak =24.3.0.0 -...

7.2CVSS5.4AI score0.00471EPSS
Exploits0
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.6 views

IBM Security verify Access Appliance 信任管理问题漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...

8.1CVSS8.3AI score0.00582EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/12/13 12:0 a.m.6 views

PT-2023-7945 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions 10.0.0 through 10.0.10 Description: The issue is related to the incorrect neutralization of special elements used in SQL commands, which can allow a remote attacker to modify the logic of a database query by injecting arbitrary...

10CVSS7.5AI score0.99628EPSS
Exploits27References158
OSV
OSV
added 2023/01/26 9:16 p.m.42 views

UBUNTU-CVE-2022-41941

GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cross-site Scripting. An administrator may store malicious code in help links. This issue is patched in 10.0.6...

6.2CVSS6.7AI score0.00577EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/08/18 12:0 a.m.3 views

PT-2022-21763 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue in the Address Book of Cybozu Office allows a remote authenticated attacker to obtain Address Book data via unspecified vectors. Recommendations: For...

4.3CVSS4.3AI score0.00728EPSS
Exploits0References5
Rows per page
Query Builder