1213 matches found
conf-cfg-ini 安全漏洞
conf-cfg-ini is a package from the individual developer Rolf Loges in Germany. It uses Node.js to encode and decode conf/cfg/ini-Files. A security vulnerability exists in conf-cfg-ini versions prior to 1.2.2, which stems from the fact that this package is susceptible to prototype contamination; i...
GHSA-RHF5-2378-3W3W markdown-it-decorate vulnerable to cross-site scripting (XSS)
markdown-it-decorate adds attributes, IDs and classes to Markdown, and the most recent version 1.2.2 was published in 2017. All versions are currently vulnerable to cross-site scripting XSS and there is no fixed version at this time...
Known vulnerable to account takeover via host header injection attack in v1.3.1
Known v1.3.1 was discovered to allow attackers to perform an account takeover via a host header injection attack. The researcher report indicates that versions 1.3.1 and prior are vulnerable. Version 1.2.2 is the last version tagged on GitHub and in Packagist, and development related to the 1.3.x...
CVE-2022-31290
A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...
CVE-2018-9057 affecting package terraform for versions less than 1.2.2-2
CVE-2018-9057 affecting package terraform for versions less than 1.2.2-2. An upgraded version of the package is available that resolves this issue...
PT-2022-6198 · Dell · Dell Alienware M17 R5 Bios
Name of the Vulnerable Software and Affected Versions: Dell Alienware m17 R5 BIOS versions prior to 1.2.2 Description: The issue is related to a buffer access vulnerability in the BIOS software of Dell Alienware m17 R5 laptops. A malicious user with admin privileges could potentially exploit this...
CVE-2021-41924
Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...
CVE-2021-41924
CVE-2021-41924 affects Webkul krayin crm prior to 1.2.2. The root cause is an XSS in the datagrid render path (lack of sanitization in v-html in table-body.vue), enabling attacker-controlled script execution when viewing data. Remediation identified: upgrade to version 1.2.2 or newer. Other sourc...
Webkul krayin crm 跨站脚本漏洞
Webkul krayin crm is a free and open source CRM solution for small and medium sized businesses from Webkul India. A cross-site scripting vulnerability exists in Webkul krayin crm versions prior to 1.2.2, which stems from an XSS vulnerability in datagrid...
AriaNg 访问控制错误漏洞
AriaNg is mayswind open source a modern web front end that makes aria2 easier to use. An access control error vulnerability exists in AriaNg versions v0.1.0 through v1.2.2, which stems from the application not verifying the access rights of visitors...
PT-2022-11394 · Ariang · Ariang
Name of the Vulnerable Software and Affected Versions: AriaNg versions 0.1.0 through 1.2.2 Description: The issue is related to incorrect access control, where the system fails to authenticate visitors' access rights, potentially allowing unauthorized access. Recommendations: For versions 0.1.0...
Server Status 跨站脚本漏洞
Server Status is a collection of server status tools from Confluence. A security vulnerability exists in Server Status version 1.2.2, which can be exploited by an attacker to remotely launch a cross-site scripting attack...
CVE-2022-1752
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2...
Trudesk代码问题漏洞
Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Trudesk 1.2.2 that stems from the unrestricted upload of dangerous files...
CVE-2022-1775
Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1775
Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1803
Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...
Input validation
Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...