EUVD-2021-13276

Malware in sbrugna...

CVE-2022-37251

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...

Security Bulletin: A security vulnerability in Node.js codemirror module affects IBM Cloud Automation Manager.

Summary A security vulnerability in Node.js codemirror module affects IBM Cloud Automation Manager. Vulnerability Details CVEID:CVE-2020-7760 DESCRIPTION: Node.js codemirror module is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw. By using...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from the US-based Pixel & tonic, Inc. A security vulnerability exists in Pixel & tonic Craft CMS version 4.2.0.1, which was discovered via src/web/assets/cp/src/js/BaseElementSelectInput.js to contain a cross-site scripting vulnerability...

GHSA-8R89-X93X-MJQ2 Craft CMS Stored Cross-site Scripting in User Addresses Title

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

Craft CMS Stored Cross-site Scripting in User Addresses Title

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

GHSA-3CVM-7WRH-QRF9 Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...

CVE-2022-37251

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...

Cross site scripting

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...

CVE-2022-37251

Craft CMS 4.2.0.1 is affected by a Cross Site Scripting (XSS) vulnerability via Drafts/entry drafts. Multiple sources (NVD/NVD-derived CVE, GitHub GHSA advisory, Veracode entry, OSV entries, CVE lists, and related national vulnerabilities) corroborate that Craft CMS versions up to 4.2.0.1 (and ea...

CVE-2022-37247

CVE-2022-37247 concerns Craft CMS 4.2.0.1 with a stored XSS on the /admin/settings/fields page. Multiple connected sources corroborate the issue, including Red Hat and Veracode entries. The Veracode description attributes the vulnerability to improper encoding in Cp.php affecting the _fldTabHtml ...

CVE-2022-37250

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

Cross site scripting

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

CVE-2022-37248

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) through src/helpers/Cp.php. The issue involves improper encoding in functions related to tab/groupName handling (as cited by GHSA and Veracode reports), enabling injection/execution of malicious JavaScript. CVE-2022-37248 has a NVD CVS...

CVE-2022-37250

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from Pixel & tonic, USA. A security vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue on the /admin/dashboard page...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from Pixel & tonic, USA. A security vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue on the /admin/settings/fields page...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from the US company Pixel & tonic. A cross-site scripting vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue on the /admin/myaccount page...

Security Bulletin: A security vulnerability in Node.js node-forge affects IBM Cloud Automation Manager

Summary A security vulnerability in Node.js node-forge affects IBM Cloud Automation Manager. Vulnerability Details CVEID:CVE-2022-24773 DESCRIPTION: Node.js node-forge module could allow a remote attacker to bypass security restrictions, caused by improper signature verification when checking...

CVE-2022-30422

Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the Viewstate parameter...