22 matches found
EUVD-2025-41446
Malicious code in candra-toge53-sluey npm...
org.opencms.modules:com.alkacon.opencms.v8.event (8.5.2), org.opencms.modules:com.alkacon.opencms.v8.news (8.5.2) +31 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.5.2)
org.opencms:opencms-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event 8.5.2 - org.opencms.modules:com.alkacon.opencms.v8.news 8.5.2 ...
org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (9.5.0)
org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...
de.eonas.portal:opencmsinstaller (8.5.1.1), de.eonas.portal:opencmsportaldriver (>=8.5.1.1, <=9.0.0.7) +12 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.5.1)
org.opencms:opencms-core MAVEN version 8.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 8.5.1.1 - de.eonas.portal:opencmsportaldriver =8.5.1.1, =9.0.0.7 -...
org.opencms:opencms-webapp (8.0.2) potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.0.2)
org.opencms:opencms-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.2 Source cves: CVE-2024-41446 Source advisory: OSV:GHSA-7M3W-M5G3-CC88...
org.opencms.modules:com.alkacon.opencms.v8.article (>=8.0.1, <=8.0.4), org.opencms.modules:com.alkacon.opencms.v8.event (>=8.0.1, <=8.0.3) +65 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.0.1)
org.opencms:opencms-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.article =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1,...
org.opencms:opencms-setup (8.0.3-rev), org.opencms:opencms-upload (8.0.3-rev) +16 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.0.3-rev)
org.opencms:opencms-core MAVEN version 8.0.3-rev is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-setup 8.0.3-rev - org.opencms:opencms-upload 8.0.3-rev -...
de.eonas.portal:opencmsinstaller (9.5.1.0), de.eonas.portal:opencmsportaldriver (9.5.1.0) +21 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (9.5.1)
org.opencms:opencms-core MAVEN version 9.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 9.5.1.0 - de.eonas.portal:opencmsportaldriver 9.5.1.0 -...
de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +107 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (>=8.0.1, <=9.5.3)
org.opencms:opencms-core MAVEN version =8.0.1, =8.5.1.1, =8.5.1.1, =8.0.1, =8.0.1, =8.0.4, =8.5.0, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.5.0, =8.5.2 and more Source cves: CVE-2024-41446 Source advisory: SNYK:JAVA-ORGOPENCMS-9802335...
org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.0.4)
org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2024-41446 Source advisory: OSV:GHSA-7M3W-M5G3-CC88...
org.opencms:opencms-components (9.0.1), org.opencms:opencms-gwt (9.0.1) +19 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (9.0.1)
org.opencms:opencms-core MAVEN version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.0.1 - org.opencms:opencms-gwt 9.0.1 - org.opencms:opencms-setup 9.0.1 -...
de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +2 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (8.0.3.1)
org.opencms:opencms-core MAVEN version 8.0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal.demo:content 0.1 - de.eonas.portal.demo:templates 0.1 -...
CVE-2024-41446
creationtimestamp| type| source ---|---|--- 2025-04-21 14:54:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndgahzxwr2b 2025-04-21 15:02:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12667 2025-04-21 18:09:25+00:00| seen|...
CVE-2024-41446
Alkacon OpenCMS v17.0 is susceptible to a stored cross-site scripting (XSS) vulnerability. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the image parameter within the Create/Modify article function. As a mitigation, it is recommended to disable the Creat...
CVE-2024-41446
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
CVE-2023-41446
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...
CVE-2023-41446
CVE-2023-41446 affects phpkobo AjaxNewTicker version 1.0.5. The vulnerability is a Cross Site Scripting flaw in the index.php component, exploitable via a crafted script in the title parameter to trigger arbitrary code execution. The NVD/CVE entry rates it as CVSS v3.1 Base Score 6.1 (Medium) wit...
CVE-2022-41446
creationtimestamp| type| source ---|---|--- 2022-11-23 07:13:54+00:00| seen| https://t.me/cibsecurity/53401 2026-07-29 12:00:56+00:00| seen| https://t.me/CVEhub/4386 2026-07-30 00:01:34+00:00| seen| https://t.me/CVEhub/4386 2026-07-31 22:00:03+00:00| published-proof-of-concept|...
CVE-2022-41446
CVE-2022-41446 is an access control vulnerability in Record Management System using CodeIgniter v1.0. The issue resides in /Admin/dashboard.php, enabling attackers to access and modify user data due to improper access control. Affects CodeIgniter-based Teachers/Record Management System v1.0; CVSS...