13 matches found
CVE-2026-43794
A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption...
macOS 26.x < 26.6.2 Multiple Vulnerabilities (148281)
The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6.2. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Taho...
EUVD-2025-43794
Malicious code in jaja-moci15-sukiwir npm...
CVE-2025-43794
creationtimestamp| type| source ---|---|--- 2025-09-15 14:14:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyuykbaz5b2g...
CVE-2024-43794
creationtimestamp| type| source ---|---|--- 2024-08-23 19:38:37+00:00| seen| https://t.me/cvedetector/4017...
CVE-2024-43794 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect
OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...
CVE-2024-43794
CVE-2024-43794 affects the OpenSearch Dashboards Security Plugin, which adds a configuration management UI for OpenSearch Security features. The issue is improper validation of the nextUrl parameter, allowing external redirects on login for specially crafted inputs. A patch is available and recom...
CVE-2024-43794 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect
OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is availab...
Discourse 2.8.x < 2.8.0.beta9 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
CVE-2021-43794
creationtimestamp| type| source ---|---|--- 2021-12-01 22:35:41+00:00| seen| https://t.me/cibsecurity/33227...
CVE-2021-43794
CVE-2021-43794 affects Discourse. An attacker can poison the cache for anonymous users, causing a JSON blob to be shown instead of HTML and enabling a partial DoS. Some sources attribute this to cache-poisoning via the development-mode header. The vulnerability is mitigated in the latest stable, ...
CVE-2021-43794 Anonymous user cache poisoning via development-mode header in Discourse
Discourse is an open source discussion platform. In affected versions an attacker can poison the cache for anonymous i.e. not logged in users, such that the users are shown a JSON blob instead of the HTML page. This can lead to a partial denial-of-service. This issue is patched in the latest...