Authorization

The SendGrid WordPress plugin is vulnerable to authorization bypass via the getajaxstatistics function found in the /lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8...

GHSA-W4WQ-RVMQ-77X7 Cross-site scripting in anchorme

All versions of package anchorme are vulnerable to Cross-site Scripting XSS via the main functionality...

Cross-site scripting in anchorme

All versions of package anchorme are vulnerable to Cross-site Scripting XSS via the main functionality...

Command injection

All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization...

Know where your project stands with the new project overview!

In late April, I introduced the new project experience for SonarCloud, which has already been adopted by a lot of you. Today, we’re adding a brand new project overview page! We can’t wait for you to try it! Let’s discover what’s inside in this blog. Your project status & activity all in one place...

CVE-2020-23179

A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...

The vulnerability of the qemu-seccomp.c component of the QEMU hardware emulator, related to the use of an incomplete black list, allows a hacker to trigger a service failure.

The vulnerability of the qemu-seccomp.c component of the QEMU hardware emulator lies in the use of the seccomp policy only for the main thread. Exploiting this vulnerability allows an attacker to cause a system failure...

Php-fusion PHP-Fusion 跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in administration/settingsmain.php in PHP-Fusion, which can be exploited to execute arbitrary web script or HTML via the "site footer" field...

CVE-2021-23402: Improperly Controlled Modification of Object Prototype Attributes

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-34187: Improper Neutralization of Special Elements used in an SQL Command

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter...

PT-2021-15489 · Lutils · Lutils

Name of the Vulnerable Software and Affected Versions: lutils versions prior to a fixed version Description: The issue concerns Prototype Pollution via the main merge function. This allows for potential manipulation of the prototype, which can lead to various security issues. Recommendations: For...

CVE-2021-27887: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

CVE-2021-26197

An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...

CVE-2021-26197

An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...

Design/Logic Flaw

An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...

CVE-2021-26197

An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...

UBUNTU-CVE-2021-26197

An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...

CVE-2021-26197

An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...

CVE-2021-26197

Removed by vendor...

CVE-2021-26197: Improper Check for Unusual or Exceptional Conditions

An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...