aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), org.jenkins-ci.main:jenkins-test-harness (1.520) +24 more potentially affected by CVE-2018-1999045 via org.jenkins-ci.main:jenkins-core (1.520)

org.jenkins-ci.main:jenkins-core MAVEN version 1.520 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.4, =1.0.4, =1.0.4, =2.0,...

adwaita-icon-theme bug fix and enhancement update

An update is available for adwaita-icon-theme. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

adwaita-icon-theme bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2022-29811

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

CVE-2022-29811

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

CVE-2022-29811

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

CVE-2022-29811

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

PT-2022-19844

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2022.1.14638 Description The issue allows for stored XSS via project icon. Recommendations For versions prior to 2022.1.14638, update to version 2022.1.14638 or later to resolve the issue...

CVE-2022-29811: Improper Neutralization of Input During Web Page Generation

In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible...

CVE-2021-24746

The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled which is the default setting, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24746

The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled which is the default setting, leading to a Reflected Cross-Site Scripting issue...

WordPress Easy Social Icons plugin <= 3.2.0 - Unauthenticated Arbitrary Icon Deletion vulnerability

Unauthenticated Arbitrary Icon Deletion vulnerability discovered by Jan w Oleju in WordPress Easy Social Icons versions plugin = 3.2.0. Solution Update the WordPress Easy Social Icons plugin to the latest available version at least 3.2.1...

Easy Social Icons < 3.2.1 - Unauthenticated Arbitrary Icon Deletion

The plugin does not have authorisation and CSRF checks when deleting icons, allowing unauthenticated user to delete arbitrary icons https://example.com/?cnss-delete=&id=1...

brython-server (>=2.0.3, <=2.2.1), cimage (>=1.4.1, <=1.4.2) +7 more potentially affected by unknown CVE via pillow (2.9.0)

pillow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - brython-server =2.0.3, =1.4.1, =0.0.1, =1.0.7, =0.6.1, =0.1.1, =0.5.28, =0.0.1.dev0, =1.0.0b1 Source cves: unknown CVE Source advisory:...

brython-server (>=2.0.3, <=2.2.1), cimage (>=1.4.1, <=1.4.2) +7 more potentially affected by CVE-2022-24303 via pillow (2.9.0)

pillow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - brython-server =2.0.3, =1.4.1, =0.0.1, =1.0.7, =0.6.1, =0.1.1, =0.5.28, =0.0.1.dev0, =1.0.0b1 Source cves: CVE-2022-24303 Source advisory:...

CVE-2022-24347

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon...

CVE-2022-24347

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon...

Cross site scripting

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon...

CVE-2022-24347

JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon...

JetBrains YouTrack Cross-site Scripting Vulnerabilities

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. A cross-site scripting vulnerability exists in previous versions of JetBrains YouTrack 2021.4.36872, which stems from the lack of data validation filtering of user-supplied data and...