Filter
AND
AND
-Infinity
0
Trending
Langgenius Dify Node.jsIt was possible to bypass Permissions and access non authorized modules by using process.mainModule.…
7.5
First published (updated )
maven/com.graphql-java:graphql-javaGraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (E…
7.5
First published (updated )
IBM Cognos ControllerCodehaus-plexus: directory traversal
7.5
First published (updated )
Langgenius Dify Node.jsNode.js could allow a local attacker to gain elevated privileges on the system, caused by the DLL se…
7.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Langgenius Dify Node.jsCommand Injection, OS Command Injection
8.1
First published (updated )
redhat/nodeNode.js could provide weaker than expected security, caused by an error related to the formatting lo…
8.2
First published (updated )
redhat/nodeA flaw was found in node.js, where it did not properly handle multi-value Relative Distinguished Nam…
7.4
First published (updated )
redhat/nodeNode.js could allow a remote attacker to bypass security restrictions, caused by a string injection …
7.4
First published (updated )
redhat/nodeNode.js could allow a remote attacker to bypass security restrictions, caused by the improper handli…
7.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Langgenius Dify Node.jsNode.js could allow a local attacker to gain elevated privileges on the system, caused by improper c…
7.8
First published (updated )
maven/software.amazon.ion:ion-javaIon Java StackOverflow vulnerability
7.5
EPSS
0.05%
First published (updated )
redhat/nodejsUndici vulnerable to Regular Expression Denial of Service in Headers
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.springframework:spring-webSpring Framework URL Parsing with Host Validation
8.1
First published (updated )
maven/org.springframework:spring-webSpring Framework URL Parsing with Host Validation
8.1
First published (updated )
IBM Cognos ControllerApache XML Graphics FOP: XML External Entity (XXE) Processing
7.5
First published (updated )
IBM Cognos ControllerIBM Controller could allow an authenticated attacker to conduct formula injection. An attacker could…
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
IBM Cognos ControllerIBM Controller client application contains hard coded database passwords in source code which could …
8.8
First published (updated )
IBM Cognos ControllerIBM Cognos Controller is vulnerable to unrestricted deserialization. This vulnerability allows users…
8.8
First published (updated )
maven/org.apache.tomcat.embed:tomcat-embed-coreApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts
7.5
First published (updated )
Siemens SINEC InsExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
IBM Cognos ControllerIBM Cognos Controller session fixation
8.8
First published (updated )
IBM Cognos ControllerIBM Cognos Controller SQL injection
7.2
First published (updated )
IBM Cognos ControllerIBM Cognos Controller information disclosure
7.5
First published (updated )
IBM Cognos ControllerIBM Cognos Controller information disclosure
7.5
First published (updated )
IBM Cognos ControllerIBM Cognos Controller improper certificate validation
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.