Ariadne Component Library vulnerable to Server-Side Request Forgery

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 can address this issue. It is recommended to upgrade t...

CVE-2017-20157

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

CVE-2017-20157

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

Server side request forgery (ssrf)

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

CVE-2017-20157 Ariadne Component Library Url.php server-side request forgery

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

CVE-2017-20157

Ariadne Component Library (versions up to 2.x) contains a server-side request forgery (SSRF) in an unknown function of src/url/Url.php. The vulnerability is classified as critical and is triggered by manipulated input; impact is documented as SSRF with potential access to internal resources. A fi...

Ariadne Component Library 代码问题漏洞

Ariadne Component Library is a set of url, http and xss components for Ariadne CMS open source. A code issue vulnerability exists in Ariadne Component Library version 2.x and prior versions. An attacker could exploit this vulnerability to perform server-side request forgery attacks...

Server-Side Request Forgery (SSRF)

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

CVE-2022-44679

Windows Graphics Component Information Disclosure Vulnerability...

Malicious code in ng-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ef416fdc9c0de5c01568db5736d97e155db0d9f87676459ecaad2b0c0b009e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4843 Malicious code in ng-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ef416fdc9c0de5c01568db5736d97e155db0d9f87676459ecaad2b0c0b009e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-224 Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6db834c8045417e3e41ad3434edf6b7d78a926da70d77e7e11a1c3494ae28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-3895 Potential XSS in common user interface component library

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML XSS...

Malicious Package

Overview truelayer-component-library is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

CVE-2022-35837

Windows Graphics Component Information Disclosure Vulnerability...

Malicious code in walmart-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a19673157e170466d6dc024c7babea89c701b544db74ba60c8fa7d4f64888d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7042 Malicious code in walmart-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a19673157e170466d6dc024c7babea89c701b544db74ba60c8fa7d4f64888d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6945 Malicious code in visitor-ui-component-library-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a49ce3e79a28efd550ad3f4e2395fef81eb43c22efdaf89af060d89fd4649e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JVN#56297719: JBoss RichFaces vulnerable to remote Java code execution

JBoss RichFaces is an Ajax-enabled component library for JavaServer Faces JSF. JBoss RichFaces contains a flaw in parsing the do parameter, which may result in arbitrary Java code execution. Impact When a specially crafted input is processed, arbitrary Java code may be executed on the application...