7459 matches found
CVE-2025-36147 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...
CLEANSTART-2026-QW90668 Security fix for ghsa-5359-pvf2-pw78 applied in: thingsboard-tb-web-ui 4.3.0.1-r0
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NN34341 Security fix for CVE-2026-26960 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.10.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, thingsboard-tb-web-ui 4.3.1-r0
CVE-2026-26960 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WV30852 Security fix for CVE-2026-29786 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0
CVE-2026-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-QM33219 Security fix for ghsa-37ch-88jc-xwx2 applied in: sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0
ghsa-37ch-88jc-xwx2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-QC14914 Security fix for CVE-2026-4867 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0
CVE-2026-4867 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-DT32496 Security fix for ghsa-76c9-3jph-rj3q applied in: thingsboard-tb-web-ui 4.1-r1
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-RN17986 Security fix for ghsa-vg35-5wq7-3x7w applied in: thingsboard-tb-web-ui 4.3.1.1-r1
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-AV82595 Security fix for ghsa-v98h-vmpc-fpqv applied in: thingsboard-tb-web-ui 4.3.1.1-r1
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NJ61543 Security fix for CVE-2026-47762 applied in: thingsboard-tb-web-ui 4.3.1.1-r1
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UG66310 Security fix for ghsa-q742-qvgc-gc2f applied in: thingsboard-tb-web-ui 4.3.1.1-r1
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-LJ04584 Security fix for CVE-2026-47761 applied in: thingsboard-tb-web-ui 4.3.1.1-r1
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-KI92427 Security fix for CVE-2026-47759 applied in: thingsboard-tb-web-ui 4.3.1.1-r1
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-93371
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...
CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...
CVE-2026-93371
A command injection vulnerability exists in marcopiovanello/yt-dlp-web-ui up to v4 , specifically in the NewGenericDownload function within server/internal/downloaders/generic.go. Manipulation of the params argument allows a remote, unauthenticated attacker to execute arbitrary commands with no u...
CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...
EUVD-2026-82640
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...
CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...
