Lucene search
+L

345 matches found

CNNVD
CNNVD
•added 2022/06/10 12:00 a.m.•20 views

gatsby 代码问题漏洞

gatsby is a software application. A free open source framework based on React that helps developers build extremely fast websites and applications. A security vulnerability exists in the gatsby plugin mdx versions 2.14.1 and earlier, 3.15.2 and earlier, which stems from vulnerability to...

9.8CVSS8.4AI score0.01962EPSS
SaveExploits1References5
Veracode
Veracode
•added 2022/06/06 11:20 a.m.•23 views

Arbitrary Code Injection

gatsby-plugin-mdx is vulnerable to arbitrary code injection. The vulnerability exists because the gatsby-plugin-mdx allows JS engine for frontmatter by default due to untrusted inputs which allows an attacker to inject arbitrary codes...

4.3AI score
SaveExploits0
OSV
OSV
•added 2022/06/03 10:32 p.m.•44 views

GHSA-MJ46-R4GR-5X83 Unsanitized JavaScript code injection possible in gatsby-plugin-mdx

Impact The gatsby-plugin-mdx plugin prior to versions 3.15.2 and 2.14.1 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default configuration, unless input is sanitized. The vulnerability is present when passing input in both webpack MDX fil...

8.1CVSS5.8AI score0.01962EPSS
SaveExploits1References7
vulnersOsv
vulnersOsv
•added 2022/06/03 10:32 p.m.•5 views

@commercetools-docs/gatsby-theme-docs (>=0.0.0-canary-20211016203612, <=17.0.9), @zedvision/blog (>=14.0.1, <=14.3.6) +1 more potentially affected by CVE-2022-25863 via gatsby-plugin-mdx (>=2.0.0, <=2.14.0)

gatsby-plugin-mdx NPM version =2.0.0, =0.0.0-canary-20211016203612, =14.0.1, =13.0.5, =14.0.0 Source cves: CVE-2022-25863 Source advisory: OSV:GHSA-MJ46-R4GR-5X83...

9.8CVSS8.6AI score0.01962EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/06/03 10:32 p.m.•4 views

@commercetools-docs/gatsby-theme-docs (>=0.0.0-canary-20211022203039, <=19.1.0), @dcl/docs-site (>=1.0.0-3010867520.commit-1740972, <=1.0.0-20220919140413.commit-6dee65c) +5 more potentially affected by CVE-2022-25863 via gatsby-plugin-mdx (>=3.2.0, <=3.13.0)

gatsby-plugin-mdx NPM version =3.2.0, =0.0.0-canary-20211022203039, =1.0.0-3010867520.commit-1740972, =1.1.1, =1.18.5, =1.0.2, =1.0.8 - gatsby.webstackbuilders.com 0.1.0 Source cves: CVE-2022-25863 Source advisory: OSV:GHSA-MJ46-R4GR-5X83...

9.8CVSS8.6AI score0.01962EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/06/03 12:00 a.m.•5 views

PT-2022-17574

Name of the Vulnerable Software and Affected Versions gatsby-plugin-mdx versions 3.0.0 through 3.15.1 gatsby-plugin-mdx versions 2.14.0 and earlier Description The gatsby-plugin-mdx plugin is vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, du...

9.8CVSS0.01962EPSS
SaveExploits1References12
vulnersOsv
vulnersOsv
•added 2022/02/18 1:41 p.m.•7 views

@commercetools-docs/gatsby-theme-docs (>=0.0.0-canary-20211016203612, <=17.0.9), @zedvision/blog (>=14.0.1, <=14.3.6) +1 more potentially affected by CVE-2022-25863 via gatsby-plugin-mdx (>=2.0.0, <=2.14.0)

gatsby-plugin-mdx NPM version =2.0.0, =0.0.0-canary-20211016203612, =14.0.1, =13.0.5, =14.0.0 Source cves: CVE-2022-25863 Source advisory: SNYK:JS-GATSBYPLUGINMDX-2405699...

9.8CVSS8.6AI score0.01962EPSS
SaveExploits1
Snyk
Snyk
•added 2022/02/18 1:41 p.m.•15 views

Deserialization of Untrusted Data

Overview gatsby-plugin-mdx is a MDX integration for Gatsby Affected versions of this package are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiting this...

9.8CVSS8AI score0.01962EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv
•added 2022/02/18 1:41 p.m.•5 views

@commercetools-docs/gatsby-theme-docs (>=0.0.0-canary-20211022203039, <=19.1.0), @dcl/docs-site (>=1.0.0-3010867520.commit-1740972, <=1.0.0-20220919140413.commit-6dee65c) +5 more potentially affected by CVE-2022-25863 via gatsby-plugin-mdx (>=3.2.0, <=3.13.0)

gatsby-plugin-mdx NPM version =3.2.0, =0.0.0-canary-20211022203039, =1.0.0-3010867520.commit-1740972, =1.1.1, =1.18.5, =1.0.2, =1.0.8 - gatsby.webstackbuilders.com 0.1.0 Source cves: CVE-2022-25863 Source advisory: SNYK:JS-GATSBYPLUGINMDX-2405699...

9.8CVSS8.6AI score0.01962EPSS
SaveExploits1
Citrix
Citrix
•added 2021/11/03 12:00 a.m.•20 views

MAM SDK Migration Unexpected behavior on MDX/MAM SDK app container

Some interaction between managed applications in the same container are not working properly for example, copy and paste, open-in, etc. Scenario 1: Productivity Apps only using Hybrid mode One app on Legacy MDX and one app on MAM SDK. This scenario is not supported and not recommended. Scenario 2...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2021/02/22 12:00 a.m.•17 views

Microsoft Edge using MDX microVPN to connect to Citrix Gateway is seen to redirect many times unexpectedly

When using Microsoft Edge, you may experience random loading of Bookmarked websites, previously visited websites or other unexpected browser redirects HTTP 302, to websites which the user has not chosen to load at the time. Other errors found on closer log examination may appear similar to the...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2020/09/17 12:00 a.m.•18 views

After Upgrading to iOS 14 And Opening MDX Wrapped Apps Prompt Displays - "Compliance Error - Your device is out of compliance...MDX Encryption is not supported"

After Upgrading to iOS14 and opening MDX Wrapped Apps or Citrix Secure Mail/Hub/Web Displays - "Compliance Error - Your device is out of compliance. Please contact your administrator. MDX Encryption is not supported beyond iOS 13. Please reinstall the app."...

6.7AI score
SaveExploits0
Citrix
Citrix
•added 2020/08/17 12:00 a.m.•17 views

HTTP/HTTPS proxy support on NetScaler based on Traffic Policies Secure Web

This article describes how to configure NetScaler to proxy the traffic from MDX apps through a Proxy server like Squid, Bluecoat. Enterprises can proxy traffic configuring simple traffic rules on NetScaler box...

7AI score
SaveExploits0
Citrix
Citrix
•added 2020/06/11 12:00 a.m.•12 views

MDX managed apps cannot open links properly so that apps which are not managed launch automatically

Problem description: MDX app policies are configured but the app that is not managed does not launch automatically as expected. Example use case: iOS has the Booking.com app installed from the Public App Store. The device also has Secure Web and Secure Mail installed. The Secure apps are managed ...

6.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•10 views

Rockwell Automation Kinetix 6000M Integrated Drive-Motor, 400V, Non-Brake MDx-SB1003P-Qxx2x-S

Binary data 753966.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•14 views

Rockwell Automation Kinetix 6000M Integrated Drive-Motor, 400V, Brake MDx-SB1304F-Qxx4x-S

Binary data 753970.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•13 views

Rockwell Automation Kinetix 6000M Integrated Drive-Motor, 400V, Brake MDx-SB1153H-Qxx4x-S

Binary data 753971.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•14 views

Rockwell Automation Kinetix 6000M Integrated Drive-Motor, 400V, Non-Brake MDx-SB1304F-Qxx2x-S

Binary data 753968.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/05/08 12:00 a.m.•13 views

Rockwell Automation Kinetix 6000M Integrated Drive-Motor, 400V, Non-Brake MDx-SB1153H-Qxx2x-S

Binary data 753967.prm...

7.3AI score
SaveExploits0References1
Citrix
Citrix
•added 2018/12/11 12:00 a.m.•16 views

MDX Wrapped Applications: Supported Frameworks

MDX Applications can crash when they are developed using unsupported Frameworks and Libraries...

7.2AI score
SaveExploits0
Rows per page
Query Builder