CVE-2022-31478

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...

PT-2022-20754

Name of the Vulnerable Software and Affected Versions ILIAS UserTakeOver plugin versions prior to 4.0.1 Description The issue allows an attacker to list all users via the search function. Recommendations For versions prior to 4.0.1, update to version 4.0.1 or later to resolve the issue...

Malicious code in test-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 748df8f06d1c1132320f9757b1361786793823e3dc2881ff8e6d6f8f33ac4606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in all-of-them (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5760ca8f2a767c42d3ebdd58fb3b83f3f14b967be3c92ca3e98b3ba819b0b0aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nylas-mail-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cc8ea198e81b0fc8307cbea75e5735d219ac373362c7748102cb514207959d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4989 Malicious code in nylas-mail-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cc8ea198e81b0fc8307cbea75e5735d219ac373362c7748102cb514207959d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-agnitas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01b86b01a6021de948f8cc77186f640e5065625b57b69518f58e7df518fbe7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lx-cockpit-components-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87f911bdccde93661ec10bace02fa2c48d01a185ea3feaa9b23d92769647cb96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-943 Malicious code in all-digital (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89075a9d31f05ef1b5807d9cececaf98905ea0c795a5b35704331f55d1e6dec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in all-digital (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89075a9d31f05ef1b5807d9cececaf98905ea0c795a5b35704331f55d1e6dec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workspace-hoist-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e591793f57ce0827e5e1fe1fa294727de96ea3ef4263ed9171550a534d6be47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1844 Malicious code in cat-webcomponent-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e416fba4ad4098c98b9a1b6b381472b248c0fc0dd977333c87e9f707251deb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-20733

A vulnerability in the login page of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to log in without credentials and access all roles without any restrictions. This vulnerability is due to exposed sensitive Security Assertion Markup Language SAML metadata. An...

CVE-2022-30137

Executive Summary An Elevation of Privilege EOP vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are...

CVE-2022-29452

Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...

CVE-2022-29452

Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...

Cross site scripting

Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...

CVE-2022-29452

CVE-2022-29452 affects WordPress Export All URLs plugin versions

CVE-2022-29452 WordPress Export All URLs plugin <= 4.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...

CVE-2022-29452 WordPress Export All URLs plugin <= 4.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...