19 matches found
EUVD-2025-39919
Malicious code in dian-lapis40-miaww npm...
BELL-CVE-2025-39919
Bulletin has no description...
CVE-2025-39919
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being...
MAL-2025-39919 Malicious code in xpull_exchanges_m (npm)
The package xpullexchangesm was found to contain malicious code...
CVE-2021-39919
In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, the reset password token and new user email token are accidentally logged which may lead to information disclosure...
CVE-2024-39919 Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png
@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB. The package includes an ALLOWLIST where the host can specify which services the user is permitted to capture screenshots of. By...
CVE-2024-39919 Capture screenshot of localhost web services (unauthenticated pages) in @jmondi/url-to-png
@jmondi/url-to-png is an open source URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB. The package includes an ALLOWLIST where the host can specify which services the user is permitted to capture screenshots of. By...
CVE-2024-39919
creationtimestamp| type| source ---|---|--- 2024-07-13 00:45:04+00:00| published-proof-of-concept| https://github.com/jasonraimondi/url-to-png/security/advisories/GHSA-342q-2mc2-5gmp 2024-07-15 22:42:28+00:00| seen| https://t.me/cvedetector/904...
GitLab 14.0 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39919)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, the reset password token and new user...
CVE-2023-39919
creationtimestamp| type| source ---|---|--- 2023-09-04 14:16:26+00:00| seen| https://t.me/cibsecurity/69768...
CVE-2023-39919
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin = 2.0 versions...
CVE-2023-39919
CVE-2023-39919 affects the WordPress plugin wpShopGermany – Protected Shops (versions <= 2.0). The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) that can be exploited by users with admin+ privileges to inject and execute script content. The issue stems from inadequate val...
WordPress wpShopGermany – Protected Shops Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software wpShopGermany – Protected Shops Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-39919 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 210ff9ae9fe3 Credits DoYeon Park p6rkdoye0n...
CVE-2022-39919
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-39919
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2021-39919
creationtimestamp| type| source ---|---|--- 2021-12-13 18:12:08+00:00| seen| https://t.me/cibsecurity/33842...
CVE-2021-39919
In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, the reset password token and new user email token are accidentally logged which may lead to information disclosure...
CVE-2021-39919
CVE-2021-39919 affects GitLab CE/EE: vulnerable in all versions before 14.3.6, all versions from 14.4 before 14.4.4, and all versions from 14.5 before 14.5.2. The reset password token and new user email token are logged, risking information disclosure. Remediation is to upgrade to fixed releases ...