|
171
|
- |
|
-
|
-
|
Nuxt is an open-source web development framework for Vue.js. From versions 3.4.3 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6, navigateTo() with external: true generates a server-side HTML redi…
New
|
CWE-83
Improper Neutralization of Script in Attributes in a Web Page
|
CVE-2026-45669
|
2026-06-13 01:01 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
172
|
- |
|
-
|
-
|
Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder versions 3.15.4 to before 3.21.6, and 4.0.0-alpha.1 to before 4.4.6, there is an incompl…
New
|
CWE-749
Exposed Dangerous Method or Function
|
CVE-2026-45670
|
2026-06-13 01:01 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
173
|
- |
|
-
|
-
|
Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.1.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to before 3.21.6 and 4.0.…
New
|
CWE-79
CWE-349
CWE-444
Cross-site Scripting
Acceptance of Extraneous Untrusted Data With Trusted Data
HTTP Request Smuggling
|
CVE-2026-46342
|
2026-06-13 01:01 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
174
|
- |
|
-
|
-
|
Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to before 3.21.6 and 4.0…
New
|
CWE-284
CWE-288
Improper Access Control
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2026-47200
|
2026-06-13 01:01 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
175
|
- |
|
-
|
-
|
Nuxt is an open-source web development framework for Vue.js. In @nuxt/rspack-builder and @nuxt/webpack-builder from versions 3.15.4 to before 3.21.7 and 4.0.0 to before 4.4.7, there is an incomplete …
New
|
CWE-749
Exposed Dangerous Method or Function
|
CVE-2026-49993
|
2026-06-13 01:01 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
176
|
- |
|
-
|
-
|
Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 and 4.0.0 to before 4.4.7, there is a route-rule middleware bypass via case-sensitivity mismatch bet…
New
|
CWE-178
CWE-863
Improper Handling of Case Sensitivity
Incorrect Authorization
|
CVE-2026-53721
|
2026-06-13 01:01 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
177
|
- |
|
-
|
-
|
Nuxt is an open-source web development framework for Vue.js. Prior to versions 3.21.7 and 4.4.7, <NuxtLink> did not validate the URL scheme of values bound to its to or href props before rendering th…
New
|
CWE-79
CWE-83
Cross-site Scripting
Improper Neutralization of Script in Attributes in a Web Page
|
CVE-2026-53722
|
2026-06-13 01:01 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
178
|
8.0 |
HIGH
Network
|
microsoft
|
sharepoint_server
|
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
New
|
CWE-285
Improper Authorization
|
CVE-2026-47298
|
2026-06-13 01:00 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
179
|
8.8 |
HIGH
Network
|
-
|
-
|
The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operat…
New
|
CWE-1284
Improper Validation of Specified Quantity in Input
|
CVE-2026-12059
|
2026-06-13 01:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
180
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim …
New
|
CWE-749
Exposed Dangerous Method or Function
|
CVE-2026-12060
|
2026-06-13 01:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
