53 matches found
DiceBear 安全漏洞
DiceBear is an open-source random avatar generation library developed by DiceBear. Versions prior to DiceBear 9.4.2 contained security vulnerabilities. These vulnerabilities stemmed from the regular expression-based SVG attribute rewriting logic in the ensureSize function, which could be exploite...
CVE-2022-38291
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...
EUVD-2024-51501
Malicious code in bioql PyPI...
CVE-2025-8573 Concrete CMS 9 through 9.4.2 is vulnerable to Stored XSS from Home Folder on Members Dashboard page
Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page. Version 8 was not affected. A rogue admin could set up a malicious folder containing XSS to which users could be directed upon login. The Concrete CMS security team gave this...
PT-2025-31998 · Unknown · Concrete Cms
Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 9 through 9.4.2 Description: Concrete CMS versions 9 through 9.4.2 are susceptible to Stored Cross-Site Scripting XSS originating from the Home Folder on the Members Dashboard page. A malicious administrator could...
Drupal 代码问题漏洞
Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Monster Menus prior to version 9.3.4, versions 9.4.0 through 9.4.2, which stems from the inclusion of an untrusted data deserialization vulnerability...
PT-2025-2103 · Drupal · Drupal Monster Menus
Name of the Vulnerable Software and Affected Versions: Drupal Monster Menus versions 0.0.0 through 9.3.3 Drupal Monster Menus versions 9.4.0 through 9.4.1 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can potentially enable a remot...
PT-2024-20408 · Mattermost · Mattermost
Name of the Vulnerable Software and Affected Versions: Mattermost versions 8.1.x through 8.1.9 Mattermost versions 9.2.x through 9.2.5 Mattermost versions 9.3.x through 9.3.1 Mattermost versions 9.4.x through 9.4.2 Description: The issue allows an authenticated attacker to crash the client...
CVE-2023-26206
An improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an attacker to execute unauthorized code or commands via the name fields observed in the policy audit logs...
CVE-2023-22637
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in License Management would permit an authenticated...
Authentication flaw
A weak authentication vulnerability CWE-1390 in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in device registration page may allow an unauthenticated attacker to perform password spraying attacks with an increas...
K6736: OpenSSH vulnerabilities CAN-2006-5051, CAN-2006-4924
Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this article have not been evaluated for...
PT-2022-26869 · Unknown · Senayan Library Management System
Name of the Vulnerable Software and Affected Versions: Senayan Library Management System version 9.4.2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability was found in the component pop chart.php. Recommendations: For Senayan Library Management System...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management System version v9.4.2, which was discovered to contain an SQL injection...
Library Management System 跨站脚本漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System version v9.4.2, which was discovered to contain a cross-site scripting XSS...
PT-2022-26870 · Unknown · Senayan Library Management System
Name of the Vulnerable Software and Affected Versions: Senayan Library Management System version 9.4.2 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the collType parameter at the "loan by class.php" endpoint. Recommendations: For Senayan Library...
Slims9 Bulian 代码问题漏洞
Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in Slims9 Bulian version v9.4.2, which originates fr...
Drupal RCE Vulnerability (SA-CORE-2022-014) - Windows
Drupal is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...