19 matches found
CVE-2026-22579
creationtimestamp| type| source ---|---|--- 2026-01-08 06:54:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbvfl6z7ml2g...
CVE-2023-22579
Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...
CVE-2025-22579 WordPress WP Header Notification plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly WP Header Notification allows Stored XSS.This issue affects WP Header Notification: from n/a through 1.2.7...
CVE-2025-22579
CVE-2025-22579 is a stored XSS in the WordPress plugin WP Header Notification (affected:
@galenjs/framework-next (>=1.0.0 <=1.7.0), @galenjs/models (>=1.1.11 <=1.7.0) +4 more potentially affected by CVE-2023-22579 via @sequelize/core (=7.0.0-alpha.10)
@sequelize/core NPM version =7.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on @sequelize/core and may be impacted: - @galenjs/framework-next =1.0.0, =1.1.11, =0.0.2, =0.0.2, =0.0.30, =0.1.0, =0.1.1 Source cves: CVE-2023-22579 Source...
Unsafe fall-through in getWhereConditions
Impact Providing an invalid value to the where option of a query caused Sequelize to ignore that option instead of throwing an error. A finder call like the following did not throw an error: ts User.findAll where: new Date, ; As this option is typically used with plain javascript objects, be awar...
12g (=0.0.27), 1st-project (=1.0.2) +2909 more potentially affected by CVE-2023-22579 via sequelize (>=1.0.2 <=6.28.0)
sequelize NPM version =1.0.2, =0.0.1, =0.0.2, =0.0.1, =1.2.3, =1.0.0, =0.5.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =2.0.1 - @aapokiiso/hsl-congestion-route-pattern-repository =1.0.0 and more Source cves: CVE-2023-22579 Source advisory: OSV:GHSA-VQFX-GJ96-3W95...
GHSA-VQFX-GJ96-3W95 Unsafe fall-through in getWhereConditions
Impact Providing an invalid value to the where option of a query caused Sequelize to ignore that option instead of throwing an error. A finder call like the following did not throw an error: ts User.findAll where: new Date, ; As this option is typically used with plain javascript objects, be awar...
CVE-2023-22579
Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...
CVE-2023-22579 Sequalize - Unsafe fall-through in getWhereConditions
Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...
CVE-2023-22579
CVE-2023-22579 concerns Sequelize (Node.js ORM). The related docs point to a type-confusion/unsafe fall-through in getWhereConditions that can bypass parameter filtering, enabling an attacker to execute arbitrary code under certain conditions. Affected component: Sequelize runtime; core issue is ...
CVE-2023-22579 Sequalize - Unsafe fall-through in getWhereConditions
Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...
macOS 11.x < 11.6.5 Multiple Vulnerabilities (HT213184)
The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.5 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution...
CVE-2022-22579
CVE-2022-22579 is an information-disclosure vulnerability in Apple macOS components (Model I/O) caused by improper state management. Publicly referenced in macOS advisories HT213054 (macOS 12.x before 12.2) and HT213055 (macOS 11.x before 11.6.3), with fixed updates described as Security Update 2...
Apple Mac OS X Security Update (HT213055)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Mac OS X Security Update (HT213056)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
About the security content of Security Update 2022-001 Catalina
About the security content of Security Update 2022-001 Catalina This document describes the security content of Security Update 2022-001 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...
CVE-2026-22579
...
CVE-2026-22579
CVE-2026-22579 entry is rejected/not used; it does not represent an active vulnerability entry.