CVE-2021-47164

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing lag dev It could be the lag dev is null so stop processing the event. In bondenslave the active/backup slave being set before setting the upper dev so first event is without an upper dev. After...

@alex91ivanov/ngx-run-builder (1.0.0), @alfresco/adf-testing (6.0.0-A.2-8258) +137 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (>=5.0.0, <=5.3.3)

webpack-dev-middleware NPM version =5.0.0, =2.0.70, =0.12.0, =13.0.0, =0.9.2, =12.0.0-beta.0, =12.1.0-next.5, =1.0.0-alpha.32, =0.0.15, =6.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2024-29180, CVE-2026-76844 Source advisory: OSV:GHSA-WR3J-PWJ9-HQQ6...

@angular-architects/build-angular (16.2.0-next.2), @angular-devkit/build-angular (>=15.1.0-next.0, <=17.3.1) +165 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (>=6.0.0, <=6.1.1)

webpack-dev-middleware NPM version =6.0.0, =15.1.0-next.0, =9.3.0, =1.12.3, =4.20.4, =0.1.0, =3.1.0-0, =3.0.0-alpha.14, =15.1.0-snapshot-1674521814202, =16.0.0-next.6, =2.6.0, =8.4.0-rc.2, =7.0.0-rc.11, =7.0.0-rc.16 and more Source cves: CVE-2024-29180, CVE-2026-76844 Source advisory:...

GHSA-WR3J-PWJ9-HQQ6 Path traversal in webpack-dev-middleware

Summary The webpack-dev-middleware middleware does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. Details The middleware can either work with the physical filesystem when reading the files or it can...

Path traversal in webpack-dev-middleware

Summary The webpack-dev-middleware middleware does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. Details The middleware can either work with the physical filesystem when reading the files or it can...

@moneko/core (>=3.9.17-beta.25, <=3.11.1-beta.2), @proteinjs/server (>=1.0.1, <=2.1.10) +2 more potentially affected by CVE-2024-29180 +1 more via webpack-dev-middleware (7.0.0)

webpack-dev-middleware NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on webpack-dev-middleware and may be impacted: - @moneko/core =3.9.17-beta.25, =1.0.1, =1.1.0, =0.0.101, =0.0.113 Source cves: CVE-2024-29180, CVE-2026-76844 Source...

CVE-2024-29180

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the...

CVE-2024-29180 webpack-dev-middleware Path Traversal vulnerability

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the...

CVE-2024-29180 webpack-dev-middleware Path Traversal vulnerability

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the...

dev-www.thrifty.co.uk Cross Site Scripting vulnerability OBB-3882049

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

webpack-dev-middleware 安全漏洞

webpack-dev-middleware is an express style development middleware for webpack open source . Used for webpack bundles and allows to provide files emitted from webpack. A security vulnerability exists in webpack-dev-middleware versions prior to 7.1.0, 6.1.2, and 5.3.4, which stems from a path...

CVE-2024-29138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force allows Reflected XSS.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.5...

CVE-2024-29138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through = 2.5...

CVE-2024-29138

The CVE-2024-29138 issue affects the WordPress Restrict User Access – Membership Plugin with Force (vulnerable:

CVE-2024-29138 WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through = 2.5...

WordPress Restrict User Access – Membership Plugin with Force Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Software Restrict User Access – Membership Plugin with Force Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29138 Patch priority Medium CVSS severity Medium 7.1 Developer DEV Institute PSID 211a6e23f622 Credits...

CVE-2024-25933

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7...

CVE-2024-25933

CVE-2024-25933 concerns PeproDev Ultimate Invoice plugin for WordPress. Public details in connected sources indicate unauthenticated exposure of sensitive information via the init_plugin path, affecting PeproDev Ultimate Invoice versions up to 1.9.7. The NVD metrics assign a high base score (7.5)...

UBUNTU-CVE-2021-47122

In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caifdevicenotify In case of caifenrolldev fail, allocated linksupport won't be assigned to the corresponding structure. So simply free allocated pointer in case of error...

CVE-2024-25592

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV Broken Link Checker allows Stored XSS.This issue affects Broken Link Checker: from n/a through 2.2.3...