1608 matches found
Malicious code in sfdc-funnel-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 316089f2b90b5fe73ad3851e5d26f1b289aebe6b4f28413faaf534e7b486dc71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-line-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e0a07efc833dff06002f9a96964cdf1b0140f046ca60219455242deda50173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-gauge-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da3d3c4d396b88da55beb015faf69d1b023e9de5b98e08d813f6824e37d7242e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6051 Malicious code in sfdc-funnel-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 316089f2b90b5fe73ad3851e5d26f1b289aebe6b4f28413faaf534e7b486dc71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6048 Malicious code in sfdc-combo-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7cf617b3589a7e043630f4e0c193733fefe28df7f81c1b053e0ddd8a973a36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6054 Malicious code in sfdc-line-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e0a07efc833dff06002f9a96964cdf1b0140f046ca60219455242deda50173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6946 Malicious code in visualization-raphael-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in visualization-raphael-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-24896
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
Design/Logic Flaw
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
CVE-2022-24896
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
CVE-2022-24896 Tracker report renderer and chart widgets leak information in Tuleap
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
CVE-2022-24896
CVE-2022-24896 affects Tuleap versions prior to 13.7.99.239. The vulnerability stems from improper authorization checks when displaying content in the Tracker Report Renderer and Chart widgets, allowing an attacker to disclose the name of trackers and the fields used in reports. Impact is informa...
CVE-2022-24896: Missing Authorization
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
PT-2022-16965
Name of the Vulnerable Software and Affected Versions Tuleap versions prior to 13.7.99.239 Description The issue arises from improper authorization verification when displaying the content of tracker report renderer and chart widgets. This allows malicious users to retrieve the name of a tracker...
Exploit for Improper Authentication in Atlassian Jira_Data_Center
Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540）...
Helm Unsafe Link Following
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
Memory usage graphs accessible to anyone with Overall/Read
Jenkins includes a feature that shows a JVM memory usage chart for the Jenkins controller. Access to the chart in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier requires no permissions beyond the general Overall/Read, allowing users who are not administrators to view JVM memory usage data...
GHSA-R78Q-QGX6-64PP Memory usage graphs accessible to anyone with Overall/Read
Jenkins includes a feature that shows a JVM memory usage chart for the Jenkins controller. Access to the chart in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier requires no permissions beyond the general Overall/Read, allowing users who are not administrators to view JVM memory usage data...
