224 matches found
CVE-2024-47117 IBM Carbon Design System cross-site scripting
IBM Carbon Design System Carbon Charts 0.4.0 through 1.13.16 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
IBM Carbon Design System 跨站脚本漏洞
IBM Carbon Design System is a design system for building user interfaces. A cross-site scripting vulnerability exists in IBM Carbon Design System. The vulnerability stems from insufficient validation of user input. An attacker can exploit the vulnerability to embed arbitrary JavaScript code in th...
Security Bulletin: "Carbon Charts" is vulnerable to Cross-site Scripting due to Improper Neutralization of Input During Web Page Generation (CWE-79)
Summary The issue arises from the library not sanitizing custom HTML provided by developers, allowing potentially harmful scripts to be executed in the user's browser when interacting with the chart. Vulnerability Details CVEID:CVE-2024-47117 DESCRIPTION: IBM Carbon Design System is vulnerable to...
@10play/tentap-editor (>=0.5.27 <=0.7.5-alpha.0), @adminjs/design-system (>=3.0.0 <=4.0.3) +131 more potentially affected by CVE-2025-14284 via @tiptap/extension-link (>=2.0.0-beta.18 <=2.10.3)
@tiptap/extension-link NPM version =2.0.0-beta.18, =0.5.27, =3.0.0, =0.4.1, =3.0.0-alpha.1, =0.0.1, =0.2.1, =0.2.0, =0.1.0, =0.28.0, =3.4.0, =1.2.0, =0.0.3, =0.4.1 and more Source cves: CVE-2025-14284 Source advisory: SNYK:JS-TIPTAPEXTENSIONLINK-14222197...
Malicious code in @cb-global-design-system-tokens/tailwind (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f263b2c460c81b4e6f61cc1ce72351cf2f0b2d9ff3b745181715ca4296e22e2 The OpenSSF Package Analysis project identified '@cb-global-design-system-tokens/tailwind' @ 1.0.21 npm as malicious. It is considered malicious...
The vulnerability of Intel Quartus Prime Pro’s automated design system lies in its uncontrolled search path, which allows attackers to escalate their privileges.
The vulnerability of Intel Quartus Prime Pro automated design systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
Malicious code in relativity-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 043c915c6b72dafcfdabeb1d9de218698774737f39d1c0a3a9f14116b2a8eb2a The OpenSSF Package Analysis project identified 'relativity-design-system' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2024-9419 Malicious code in relativity-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 043c915c6b72dafcfdabeb1d9de218698774737f39d1c0a3a9f14116b2a8eb2a The OpenSSF Package Analysis project identified 'relativity-design-system' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2024-9857 Malicious code in snp-design-system-charts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in snp-design-system-charts (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9850 Malicious code in snap-design-systm-charts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in snap-design-system-chrts (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9849 Malicious code in snap-design-system-chrts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in snap-design-system-charst (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9848 Malicious code in snap-design-system-charst (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9828 Malicious code in scm-design-system (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in scm-design-system (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in branch-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce05613edf65a4a8af219c02f9ea8ec4563b9d66c2d4d824617dcc69d4bca211 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9134 Malicious code in branch-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce05613edf65a4a8af219c02f9ea8ec4563b9d66c2d4d824617dcc69d4bca211 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in design-system-migrations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e513e47a0b14012788a2eecf7f9518d5e4957fcaa0539897fe7def5201d214 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...