180 matches found
EUVD-2021-32814
Malicious code in bioql PyPI...
EUVD-2021-32526
Malicious code in bioql PyPI...
EUVD-2021-32524
Malicious code in bioql PyPI...
EUVD-2024-49078
Malicious code in bioql PyPI...
EUVD-2021-32815
Malicious code in bioql PyPI...
EUVD-2024-34034
Malicious code in bioql PyPI...
EUVD-2021-32818
Malicious code in bioql PyPI...
EUVD-2024-30176
Malicious code in bioql PyPI...
EUVD-2022-28410
Malicious code in bioql PyPI...
CVE-2024-8304
A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...
CVE-2024-11971
A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...
CVE-2024-12348
A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files leads to cross si...
CVE-2024-50919
Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution...
CVE-2024-43033
JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentControllerupload. NOTE: this is unrelated to the attack vector for...
CVE-2024-32358
An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...
CVE-2019-6278
XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option...
CVE-2024-12348
A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files leads to cross si...
CVE-2024-12348
Summary (CVE-2024-12348) : The vulnerability affects Guizhou Xiaoma Technology jpress 5.1.2, specifically the Attachment Upload Handler component’s function AttachmentUtils.isUnSafe in the file path /commons/attachment/upload . Manipulating the argument files[] can cause a cross-site scripting (X...
CVE-2024-12348 Guizhou Xiaoma Technology jpress Attachment Upload upload AttachmentUtils.isUnSafe cross site scripting
A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files leads to cross si...
CVE-2024-12348 Guizhou Xiaoma Technology jpress Attachment Upload upload AttachmentUtils.isUnSafe cross site scripting
A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files leads to cross si...