MAL-2023-88 Malicious code in allianz-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5206dbf9ed839ec30f1f181c10bf1b267787c0255ef6048e6fcc0fec427faf9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in allianz-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5206dbf9ed839ec30f1f181c10bf1b267787c0255ef6048e6fcc0fec427faf9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 36 Update: rust-silver-2.0.1-4.fc36

Cross-shell customizable powerline-like prompt with icons...

[SECURITY] Fedora 37 Update: rust-silver-2.0.1-4.fc37

Cross-shell customizable powerline-like prompt with icons...

WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Material Design Icons for Page Builders Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24374 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ca964ff46b5b Credits...

Material Design Icons for Page Builders < 1.4.3 - Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, which could allow attackers to make logged in admins perform such actions via a CSRF attack...

WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Material Design Icons for Page Builders Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24382 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 778ff03d1519...

Huawei EMUI and HarmonyOS Security Bypass Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is to provide a full-scenario distributed operating system based on microkernel. A security bypass vulnerability exists in Huawei EMUI and HarmonyOS.The vulnerability is caused due to dynamic hiding and restoring...

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

Design/Logic Flaw

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

PT-2023-15019 · Systemd · System

Name of the Vulnerable Software and Affected Versions: System affected versions not specified Description: The issue concerns a problem that may cause dynamic hiding and restoring of app icons. Successful exploitation of this issue may cause malicious hiding of app icons. Recommendations: At the...

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

CVE-2022-46761

CVE-2022-46761 concerns Huawei EMUI and HarmonyOS. Connected sources describe a vulnerability causing dynamic hiding/restoring of app icons, a security bypass that could enable malicious hiding of icons. The CVE notes a high severity (CVSS v3.1: 7.5, Network attack vector, Low complexity, No priv...

PT-2022-7786 · Unknown · Yuna Scatari Tbdev

Name of the Vulnerable Software and Affected Versions: Yuna Scatari TBDev versions up to 2.1.17 Description: A vulnerability has been found in Yuna Scatari TBDev, classified as problematic. The issue affects the function get user icons of the file usersearch.php. The manipulation of the argument...

WordPress SVG Icons Plugin Arbitrary File Upload (CVE-2022-0863)

An arbitrary file upload vulnerability exists in WordPress SVG Icons plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

OPENSUSE-SU-2022:10219-1 Security update for opera

This update for opera fixes the following issues: Update to 93.0.4585.11 - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -FramedBrowserWindow sendEvent: - DNA-103125...

GHSA-8782-XGH5-R7MV Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons

Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the dashboard icons due to un-sanitized output. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+...

Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons

Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the dashboard icons due to un-sanitized output. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+...

GHSA-9JC5-9WH5-MC36 Concrete CMS vulnerable to Cross-site Scripting

Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting XSS in icons since the Microsoft application tile color is not sanitized. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+...