MAL-2022-6748 Malicious code in ui-component-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9610c2f8d11b979d1eb35782d93fafa64ebfa1b8a1220d3ac0243f40beab69a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WP SVG Icons plugin remote code execution vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP SVG Icons plugin version 3.2.3 and prior versions contain a remote code execution...

CVE-2022-0863

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution...

MAL-2022-5176 Malicious code in package-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ee7402d49aeecdf40eecddd54c43432e034a74e4cbec83447f396485971eff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ee7402d49aeecdf40eecddd54c43432e034a74e4cbec83447f396485971eff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-13482 · WordPress · Wp Svg Icons

Name of the Vulnerable Software and Affected Versions: WP SVG Icons WordPress plugin versions 3.2.3 and earlier Description: The issue allows a high-privileged user, such as an admin, to upload a zip file containing malicious PHP code, leading to remote code execution. This is due to the plugin n...

Stored XSS vulnerability in Custom Job Icon Plugin

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

GHSA-WRWQ-4F2H-QXJ8 Stored XSS vulnerability in Custom Job Icon Plugin

Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

May 24, 2022—KB5014019 (OS Build 22000.708) Preview

None None...

new packages: hicolor-icon-theme

An update is available for hicolor-icon-theme. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: adwaita-icon-theme

An update is available for adwaita-icon-theme. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

adwaita-icon-theme bug fix and enhancement update

An update is available for adwaita-icon-theme. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

adwaita-icon-theme bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2022-29811

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

CVE-2022-29811

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

CVE-2022-29811

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

CVE-2022-29811

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

CVE-2021-24746

The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled which is the default setting, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24746

The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled which is the default setting, leading to a Reflected Cross-Site Scripting issue...

WordPress Easy Social Icons plugin <= 3.2.0 - Unauthenticated Arbitrary Icon Deletion vulnerability

Unauthenticated Arbitrary Icon Deletion vulnerability discovered by Jan w Oleju in WordPress Easy Social Icons versions plugin = 3.2.0. Solution Update the WordPress Easy Social Icons plugin to the latest available version at least 3.2.1...