org.apache.camel:camel-ruby (>=2.12.2, <=2.12.3), org.jruby:jruby (1.7.6) +6 more potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (1.7.6)

org.jruby:jruby-stdlib MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.apache.camel:camel-ruby =2.12.2, =0.4.1, =0.7.3 Source cves: CVE-2018-1000075 Source advisory:...

org.apache.camel:camel-ruby (>=2.12.2, <=2.12.3), org.jruby:jruby (1.7.6) +6 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.6)

org.jruby:jruby-stdlib MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.apache.camel:camel-ruby =2.12.2, =0.4.1, =0.7.3 Source cves: CVE-2018-1000073 Source advisory:...

org.jruby:jruby (1.7.11), org.jruby:jruby-noasm (1.7.11) +7 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.11)

org.jruby:jruby-stdlib MAVEN version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - org.jruby:jruby 1.7.11 - org.jruby:jruby-noasm 1.7.11 - org.nuiton.js:nuiton-js-wro 1.0.3 -...

PT-2022-17573

Name of the Vulnerable Software and Affected Versions sds versions 0.0.0 and later Description The issue allows the library to be tricked into adding or modifying properties of the Object.prototype. This is achieved by abusing the set function located in js/set.js. Recommendations For sds version...

CVE-2022-25862: Improperly Controlled Modification of Object Prototype Attributes

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

CVE-2022-1567

The WP-JS plugin for WordPress contains a script called wp-js.php with the function wpjsadmin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6...

Cross site scripting

The WP-JS plugin for WordPress contains a script called wp-js.php with the function wpjsadmin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6...

CVE-2022-1567 WP JS <= 2.0.6 - Reflected Cross-Site Scripting

The WP-JS plugin for WordPress contains a script called wp-js.php with the function wpjsadmin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6...

CVE-2022-1567 WP JS <= 2.0.6 - Reflected Cross-Site Scripting

The WP-JS plugin for WordPress contains a script called wp-js.php with the function wpjsadmin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6...

CVE-2022-1567

The CVE-2022-1567 entry concerns the WP-JS WordPress plugin. The wp-js.php script contains the wp_js_admin function which accepts unvalidated user input and echoes it back, enabling reflected Cross-Site Scripting in plugin versions up to and including 2.0.6. The affected component is the wp-js.ph...

ALBA-2022:1784 js-d3-flame-graph bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

js-d3-flame-graph bug fix and enhancement update

An update is available for js-d3-flame-graph. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

PT-2022-13966

Name of the Vulnerable Software and Affected Versions WP-JS plugin for WordPress versions up to and including 2.0.6 Description The issue concerns the wp-js.php script in the WP-JS plugin, specifically the wp js admin function, which accepts unvalidated user input and echoes it back to the user...

WordPress plugin WP-JS has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2022-1567: Improper Neutralization of Input During Web Page Generation

The WP-JS plugin for WordPress contains a script called wp-js.php with the function wpjsadmin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6...

PT-2022-3529

Name of the Vulnerable Software and Affected Versions Secheron SEPCOS Single Package relay control and protection software affected versions not specified Description The issue is related to the incorrect implementation of a sequence of actions in the software. It allows a remote attacker to rebo...

CVE-2021-27292

A regular expression denial of service ReDoS vulnerability was found in the npm library ua-parser-js. If a supplied user agent matches the Noble string and contains many spaces then the regex will conduct backtracking, taking an ever increasing amount of time depending on the number of spaces...

bignum security vulnerabilities

bignum is an arbitrary precision integral algorithm for Node.js using OpenSSL by Stefan Thomas, a personal developer. A security vulnerability exists in bignum that stems from vulnerability to denial of service DoS attacks...

Code injection

DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...

CVE-2022-1555 DOM XSS in microweber ver 1.2.15 in microweber/microweber

DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...