139 matches found
CVE-2024-13298 Tarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting XSS.This issue affects Tarte au Citron: from 2.0.0 before 2.0.5...
CVE-2024-13298
The Drupal Tarte au Citron module (versions 2.0.0 to 2.0.4 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. A malicious actor can exploit this to perform XSS attacks remotely, potentially leading to malicious JavaScript insertion or pa...
CVE-2024-13298 Tarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting XSS.This issue affects Tarte au Citron: from 2.0.0 before 2.0.5...
CVE-2024-13298: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Tarte au Citron allows Cross-Site Scripting XSS.This issue affects Tarte au Citron: from 2.0.0 before 2.0.5...
Malicious code in lfs-au-website-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12152 Malicious code in lfs-au-website-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
DRUPAL-CONTRIB-2024-064
This module integrates Tarte au citron JS library with Drupal and prevent services to be loaded without user consent. Administrators can enable and configure services which will be managed by Tarte au citron. When Google Tag Manager GTM service is enabled, an attacker can load a GTM container tha...
Tarte au Citron - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-064
This module integrates Tarte au citron JS library with Drupal and prevent services to be loaded without user consent. Administrators can enable and configure services which will be managed by Tarte au citron. When Google Tag Manager GTM service is enabled, an attacker can load a GTM container tha...
Drupal Tarte au Citron module 2.0.0-2.0.4 - Authenticated Cross Site Scripting (XSS) vulnerability
Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff in WordPress Module Tarte au Citron versions 2.0.0-2.0.4...
CVE-2024-47365
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...
CVE-2024-47365 WordPress Automatically Hierarchic Categories in Menu plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...
PT-2024-32582 · Unknown · Atakan Au Automatically Hierarchic Categories In Menu
Name of the Vulnerable Software and Affected Versions: Atakan Au Automatically Hierarchic Categories in Menu versions 2.0.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored...
CVE-2024-47365: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...
OESA-2024-2157 libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and...
Ubuntu: Security Advisory (USN-6893-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS
Libsndfile is vulnerable to integer overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c allows an attacker to cause Denial of Service...
libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS
Libsndfile is vulnerable to integer overflow in function aureadheader in src/au.c and in functions mat4open and mat4readheader in src/mat4.c allows an attacker to cause Denial of Service...
Moderate: libsndfile security update
libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS CVE-2022-33065 For more details about the security issues, including the impact, a CVSS score,...