MAL-2025-36827 Malicious code in thistle-peony-jqv821-project (npm)

The package thistle-peony-jqv821-project was found to contain malicious code...

CVE-2023-36827

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. A path traversal directory traversal vulnerability affects fides versions lower than version 2.15.1, allowing...

CVE-2020-36827

The XAO::Web module before 1.84 for Perl mishandles characters in JSON output during use of json-embed in Web::Action...

CVE-2024-36827

creationtimestamp| type| source ---|---|--- 2025-03-28 19:29:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9443...

CVE-2024-36827

An XML External Entity XXE vulnerability in the ebookmeta.getmetadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service DoS via crafted XML input...

CVE-2024-36827

The vulnerability CVE-2024-36827 affects the ebookmeta Python library, specifically the ebookmeta.get_metadata function. It is an XML External Entity (XXE) vulnerability present in versions prior to v1.2.8, allowing attackers to access sensitive information or cause a Denial of Service (DoS) via ...

CVE-2020-36827

The XAO::Web module before 1.84 for Perl mishandles characters in JSON output during use of json-embed in Web::Action...

CVE-2020-36827

The XAO::Web module before 1.84 for Perl mishandles characters in JSON output during use of json-embed in Web::Action...

CVE-2020-36827

The CVE-2020-36827 entry affects XAO::Web (Perl) before version 1.84, where the json-embed path in Web::Action mishandles in JSON output. Impact per the documents is a security vulnerability, with CVSS v3.1 base score 5.4 (Medium) affecting network-exposed vectors, requiring low privileges and n...

CVE-2021-36827

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saturday Drive's Ninja Forms Contact Form plugin = 3.6.9 at WordPress via "label"...

CVE-2021-36827

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saturday Drive's Ninja Forms Contact Form plugin = 3.6.9 at WordPress via "label"...

CVE-2021-36827

CVE-2021-36827 affects the WordPress Ninja Forms Contact Form plugin (versions ≤ 3.6.9). The vulnerability is an authenticated stored XSS via the label field, exploitable by an admin+ user. Impact is documented as a stored XSS; exploitation status is not described in these sources. The recommende...

CVE-2022-36827

CVE-2022-36827 entry is rejected/not used per the Initial Description.

CVE-2022-36827

...