Malicious code in bsd-global-nav-design-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8363937f49377a77760b70632c87c41f4786925e36ba7d072aca7dcae2639da5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1706 Malicious code in bsd-global-nav-design-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8363937f49377a77760b70632c87c41f4786925e36ba7d072aca7dcae2639da5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

nav.2-0-2-2.inter-sys.funewa.com Cross Site Scripting vulnerability OBB-2565380

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress User Menus – Nav Menu Visibility plugin < 1.2.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress User Menus – Nav Menu Visibility plugin versions 1.2.8. Solution Update the WordPress User Menus – Nav Menu Visibility plugin to the latest available version at least 1.2.8...

WordPress User Menus – Nav Menu Visibility plugin < 1.2.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress User Menus – Nav Menu Visibility plugin versions 1.2.8. Solution Update the WordPress User Menus – Nav Menu Visibility plugin to the latest available version at least 1.2.8...

PT-2021-7043 · Microsoft · Dynamics Nav +1

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Business Central affected versions not specified Microsoft Dynamics NAV affected versions not specified Description: The issue is related to a cross-site scripting vulnerability in Microsoft Dynamics Business Central and...

Security Updates for Microsoft Dynamics NAV (August 2021)

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a Cross-site Scripting Vulnerability. Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenabl...

Cumulative Update 56 for Microsoft Dynamics NAV 2017 (Build 30601)

None None...

Cumulative Update 43 for Microsoft Dynamics NAV 2018 (Build 47562)

None None...

CVE-2021-38138

OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release...

Regular Expression Denial Of Service (ReDoS)

graphhopper-nav is vulnerable to Regular Expression Denial Of Service ReDoS. An attacker is able to crash the application by submitting a malicious url string via the getPointsFromRequest function...

Broadcom Brocade SANnav 代码问题漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. Broadcom Brocade SANnav has a security vulnerability. An attacker can use multiple vulnerabilities through the program SANnav...

CVE-2020-23373

Cross-site scripting XSS vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2020-23373

CVE-2020-23373 affects NoneCMS v1.3.0, with an XSS in admin/nav/add.html. The underlying issue is that the name parameter can trigger injection of arbitrary script/HTML by remote authenticated attackers. Public details across CNVD/NVD OSV entries consistently describe the same vector and impact; ...

CVE-2020-23376

NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parameter to launch a stored XSS attack...

NoneCMS 跨站脚本漏洞

NoneCMS is a simple and compact open-source content management system that can be used to quickly build corporate sites, personal blogs, and support mobile. A cross-site scripting vulnerability exists in admin/nav/add.html in NoneCMS version 1.3.0. Attackers can use the name parameter to inject...

Security Updates for Microsoft Dynamics NAV (Dec 2020)

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the Document Service table due to the Password field not being masked. An authenticated, remote attacker can exploit this, by inspecting as a system user, to...

Security Updates for Microsoft Dynamics NAV (Feb 2021)

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a cross site scripting XSS vulnerability due to improper validation of user-supplied input. An authenticated attacker can exploit this, by entering specially crafted URLs in the Links and Notes feature,...

XSS attack in Links and Notes feature in Microsoft Dynamics NAV (KB4602915)

None None...

KLA12070 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Dataverse can be exploited...