CVE-2022-38902

A Cross-site scripting XSS vulnerability in the Blog module - add new topic functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the name field of newly created topic...

Creating Awareness of External JavaScript Libraries in Web Applications

Qualys Web Application Scanning WAS routinely reviews and solicits customer feedback regarding vulnerabilities. This may be to enhance the detection or the detections reporting. Previously, all JavaScript libraries detected on an application are reported under the Information Gathering QID 150176...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

Code injection

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

UBUNTU-CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

CVE-2022-37609

CVE-2022-37609 affects the Node.js/js-beautify component in beautify-web, specifically version 1.13.7, due to a prototype pollution flaw in options.js via the name variable. Multiple sources corroborate a high-severity (CVSS v3.1: 9.8) exposure with network attack vector, no user interaction, and...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

PT-2022-24025 · Unknown · Js-Beautify

Name of the Vulnerable Software and Affected Versions: js-beautify version 1.13.7 Description: The issue is related to a prototype pollution vulnerability. It affects the js-beautify library, specifically via the name variable in options.js. Recommendations: For js-beautify version 1.13.7, consid...

CVE-2022-37609: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

CVE-2022-37609

Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...

Improper Name Validation in Upload Document Form

Description The name of any uploaded document can be manipulated using the destination parameter, to include new line characters in its name, breaking the execution of JS code in "New Documents" section from "Miscellaneous" menu, that will be blank until the document is removed from DB. Proof of...

OSV-2022-1008 Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52038 Crash type: Heap-buffer-overflow READ 4 Crash state: clijsparsedone clihtmlnormalise htmlnormalisemap...

Joomla JS Jobs Pro 1.3.6 SQL Injection Vulnerability

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ┌┘ Exploits ┌┘ └───────────────────────────────────────────────────────────────────────────────────────┘┘ : Author : CraCkEr : │ Website : extensions.joomla.org │ │ Vendor : Joom Sky - joomsky.com │ │...

js-systemtech.de Cross Site Scripting vulnerability OBB-2974415

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) potentially affected by CVE-2022-39250 via matrix-js-sdk (>=19.0.0, <=19.6.0-rc.1)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.55.0 Source cves: CVE-2022-39250 Source advisory: OSV:GHSA-5W8R-8PGJ-5JMF...

Authentication Bypass

matrix-js-sdk is vulnerable to authentication bypass. A malicious server admin is able to break emoji-based verification when cross-signing is in use, authenticating themselves instead of the target user being verified. The vulnerability is possible because the library confuses device IDs and...

matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) potentially affected by CVE-2022-39251 via matrix-js-sdk (>=19.0.0, <=19.6.0-rc.1)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.55.0 Source cves: CVE-2022-39251 Source advisory: OSV:GHSA-R48R-J8FX-MQ2C...

matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) potentially affected by CVE-2022-39249 via matrix-js-sdk (>=19.0.0, <=19.6.0-rc.1)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.55.0 Source cves: CVE-2022-39249 Source advisory: OSV:GHSA-6263-X97C-C4GG...