PT-2023-19147 · Themeisle · Themeisle Visualizer

Name of the Vulnerable Software and Affected Versions: Themeisle Visualizer: Tables and Charts Manager for WordPress plugin versions = 3.9.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication and affects users with...

SUSE CVE-2022-36055

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

CVE-2022-36055 affecting package helm for versions less than 3.9.4-2

CVE-2022-36055 affecting package helm for versions less than 3.9.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-36049 affecting package helm for versions less than 3.9.4-2

CVE-2022-36049 affecting package helm for versions less than 3.9.4-2. An upgraded version of the package is available that resolves this issue...

AZL-10900 CVE-2022-36049 affecting package helm for versions less than 3.9.4-2

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

AZL-10856 CVE-2022-36055 affecting package helm for versions less than 3.9.4-2

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

GHSA-H8M4-H385-QHQV Moodle Cross-site Scripting

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS...

Moodle Cross-site Scripting

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS...

GHSA-RJF2-J2R6-Q8GR Prototype Pollution in vm2

This affects the package vm2 before 3.9.4. Prototype Pollution attack vector can lead to sandbox escape and execution of arbitrary code on the host machine...

Vm2 安全漏洞

Vm2 is an advanced virtual machine/sandbox for Node.js by individual developer Patrik Simek in the Czech Republic. to run untrusted code using whitelisted Node built-in modules. Vm2 suffers from a security vulnerability that stems from a vulnerability in package vm2 prior to 3.9.4. An attacker ca...

NetApp Cloud Manager Denial of Service Vulnerability

NetApp Cloud Manager is a centralized system for viewing and managing local and cloud storage with support for hybrid, multi-cloud providers and accounts. A denial of service vulnerability exists in NetApp Cloud Manager prior to version 3.9.4. A remote attacker could exploit the vulnerability to...

CVE-2021-26992

Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a Denial of Service DoS...

CVE-2021-26991

Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing CORS policy which could allow a remote attacker to interact with Cloud Manager...

CVE-2021-26990

Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability that could allow a remote attacker to overwrite arbitrary system files...

CVE-2021-26992

Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a Denial of Service DoS...

Design/Logic Flaw

Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a Denial of Service DoS...

Netapp NetApp OnCommand Cloud Manager 安全漏洞

NetApp Cloud Manager is a centralized system for viewing and managing local and cloud storage with support for hybrid, multi-cloud providers and accounts. A cross-domain resource sharing CORS vulnerability exists in NetApp Cloud Manager prior to version 3.9.4. The vulnerability stems from an...

Netapp NetApp OnCommand Cloud Manager 安全漏洞

NetApp Cloud Manager is a centralized system for viewing and managing local and cloud storage with support for hybrid, multi-cloud providers and accounts. A denial of service vulnerability exists in NetApp Cloud Manager prior to version 3.9.4. A remote attacker could exploit the vulnerability to...

Netapp NetApp OnCommand Cloud Manager 安全漏洞

NetApp Cloud Manager is a centralized system for viewing and managing local and cloud storage with support for hybrid, multi-cloud providers and accounts. An arbitrary file overwrite vulnerability exists in NetApp Cloud Manager prior to version 3.9.4. A remote attacker could exploit this...

Moodle 3.8.x < 3.8.7, 3.9.x < 3.9.4, 3.10.x < 3.10.1 Information Disclosure Vulnerability

Moodle is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...