Known Vulnerabilities for Steal by Stealjs
Listed below are 8 of the newest known vulnerabilities associated with "Steal" by "Stealjs".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-55412 json | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agent... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-54030 json | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementat... | Not Provided | 2026-06-25 | 2026-06-26 |
| CVE-2026-53145 json | In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix change_handle ioctl, attempt 4 [air... | Not Provided | 2026-06-25 | 2026-06-30 |
| CVE-2026-50235 json | Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to ... | Not Provided | 2026-06-05 | 2026-06-05 |
| CVE-2026-50040 json | Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to unsanitized content being echoed back... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-48999 json | Attackers carefully craft malicious scripts, such as JavaScript, and inject them into target systems; when other users access... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-47119 json | Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrar... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-45665 json | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored C... | Not Provided | 2026-05-15 | 2026-05-18 |
| CVE-2026-41860 json | CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestH... | Not Provided | 2026-06-04 | 2026-06-04 |
| CVE-2026-41859 json | A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or ... | Not Provided | 2026-06-04 | 2026-06-04 |