14 matches found
EUVD-2025-43942
Malicious code in hadi-tek13-riris npm...
CVE-2025-43942
Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...
CVE-2025-43942
creationtimestamp| type| source ---|---|--- 2025-10-30 16:23:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gepcgri52q...
CVE-2025-43942
Dell Unity OS has an OS Command Injection vulnerability (CVE-2025-43942) affecting Dell Unity versions 5.5 and earlier. The issue arises from improper neutralization of special elements in OS commands, allowing a low-privilege, locally-accessible attacker to achieve command execution and privileg...
CVE-2024-43942
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects Greenshift Query and Meta Addon: from n/a before 3.9.2...
CVE-2024-43942 WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects Greenshift Query and Meta Addon: from n/a before 3.9.2...
WordPress Greenshift Query and Meta Addon Plugin < 3.9.2 is vulnerable to SQL Injection
Software Greenshift Query and Meta Addon Type Plugin Vulnerable versions 3.9.2 Fixed in 3.9.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-43942 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 13adc6d175b5 Credits Dave Jong Patchstack Required...
CVE-2022-43942
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2021-43942
creationtimestamp| type| source ---|---|--- 2022-01-04 07:38:44+00:00| seen| https://t.me/cibsecurity/34906...
CVE-2021-43942
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting XSS vulnerability in the /rest/collectors/1.0/template/custom endpoint. To exploit this issue, the attacker must trick a user into visiting...
CVE-2021-43942
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting XSS vulnerability in the /rest/collectors/1.0/template/custom endpoint. To exploit this issue, the attacker must trick a user into visiting...
CVE-2021-43942
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting XSS vulnerability in the /rest/collectors/1.0/template/custom endpoint. To exploit this issue, the attacker must trick a user into visiting...
CVE-2021-43942
CVE-2021-43942 affects Atlassian Jira Server/Data Center. Affected are Jira instances before 8.13.15 and 8.14.x before 8.20.3. The issue is a Reflected XSS via the /rest/collectors/1.0/template/custom endpoint that can be triggered when a user visits a malicious site (user interaction required). ...