Salesforce CVE-2026-22583

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cook

CVE-2024-58258 is a Server-Side Request Forgery (SSRF) vulnerability in SugarCRM's API module that exploits limited code

Salesforce Uni2TS time series forecasting library (through 1.2.0) has a code injection vulnerability that allows leverag

Argument injection in Salesforce Marketing Cloud Engagement MicrositeURL component allows command execution. First of fo

Hardcoded cryptographic key in Salesforce Marketing Cloud Engagement used across CloudPages, Forward to a Friend, Profil

Use of broken/risky cryptographic algorithm in Salesforce Marketing Cloud Engagement affecting CloudPages, Forward to a

MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component th

MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component

MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule runtime component that m

An Improper Neutralization of Argument Delimiters (Argument Injection) vulnerability exists in Salesforce Marketing Clou

A remote code execution vulnerability (CVSS 9.1). Critical severity with potential for significant impact on affected sy

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. Rated