14 matches found
MAL-2025-36827 Malicious code in thistle-peony-jqv821-project (npm)
The package thistle-peony-jqv821-project was found to contain malicious code...
CVE-2023-36827
Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. A path traversal directory traversal vulnerability affects fides versions lower than version 2.15.1, allowing...
CVE-2020-36827
The XAO::Web module before 1.84 for Perl mishandles characters in JSON output during use of json-embed in Web::Action...
CVE-2024-36827
creationtimestamp| type| source ---|---|--- 2025-03-28 19:29:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9443...
CVE-2024-36827
The vulnerability CVE-2024-36827 affects the ebookmeta Python library, specifically the ebookmeta.get_metadata function. It is an XML External Entity (XXE) vulnerability present in versions prior to v1.2.8, allowing attackers to access sensitive information or cause a Denial of Service (DoS) via ...
CVE-2024-36827
An XML External Entity XXE vulnerability in the ebookmeta.getmetadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service DoS via crafted XML input...
CVE-2020-36827
The XAO::Web module before 1.84 for Perl mishandles characters in JSON output during use of json-embed in Web::Action...
CVE-2020-36827
The XAO::Web module before 1.84 for Perl mishandles characters in JSON output during use of json-embed in Web::Action...
CVE-2020-36827
The XAO::Web module for Perl (versions prior to 1.84 ) contains a vulnerability where it mishandles characters within JSON output when utilizing json-embed in Web::Action . This incorrect handling can lead to potential security issues. Remediation involves updating the module to version 1.84 or ...
CVE-2021-36827
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saturday Drive's Ninja Forms Contact Form plugin = 3.6.9 at WordPress via "label"...
CVE-2021-36827
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Saturday Drive's Ninja Forms Contact Form plugin = 3.6.9 at WordPress via "label"...
CVE-2021-36827
CVE-2021-36827 affects the WordPress Ninja Forms Contact Form plugin (versions ≤ 3.6.9). The vulnerability is an authenticated stored XSS via the label field, exploitable by an admin+ user. Impact is documented as a stored XSS; exploitation status is not described in these sources. The recommende...