5872 matches found
GHSA-VQ4H-9GHM-QMRR vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-HWC3-3QH6-R4GG vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-2X9C-QWGF-94XR
creationtimestamp| type| source ---|---|--- 2023-03-29 00:46:15+00:00| seen| https://t.me/cibsecurity/60969...
CVE-2023-28103
matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-react-sdk functionality, causing denial of service and...
CVE-2023-28103
matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-react-sdk functionality, causing denial of service and...
CVE-2023-28103 Prototype pollution in matrix-react-sdk
matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-react-sdk functionality, causing denial of service and...
MAL-2023-306 Malicious code in ent-member-profile-home (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 512394559edad846b54131928ac811c25de69d520115a38e7a916722535305de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CKEditor 4.x < 4.21 XSS Vulnerability - Linux
CKEditor 4 is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
GHSA-5MQJ-XC49-246P vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2023-28426
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: GHSA-xrqq-wqh4-5hg2. Reason: Further investigation showed that this CVE was assigned in error. Notes: See https://github.com/darylldoyle/svg-sanitizer/issues/88 for a technical discussion...
GHSA-3X8X-79M2-3W2W vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, scala, cassandra-reaper...
GHSA-3X8X-79M2-3W2W vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, cassandra-reaper, scala, management-api-for-apache-cassandra-4.1...
GHSA-P8P7-X288-28G6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, kubeflow-pipelines, kubeflow-centraldashboard, py3-captum, opensearch-dashboards-fips, kubeflow-katib...
Malicious code in sp-home-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 666572c644b50ae47d8c155e0e6297e840cf222216ebb534d81b4e4d1e501491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fluent-ui-react-latest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d4f214d34026a7c88fc092754888c5c4c127f5cead75c2e93a25b2a3e3cc403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-HW7C-3RFG-P46J vulnerabilities
Vulnerabilities for packages: ko...
GHSA-HW7C-3RFG-P46J vulnerabilities
Vulnerabilities for packages: ko...
Fedora 38 : mingw-python-OWSLib (2023-9a878398a6)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9a878398a6 advisory. Update to OWSLib-0.28.1, fixes CVE-2023-27476. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...