CVE-2022-29649: Improper Neutralization of Input During Web Page Generation

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting XSS vulnerability...

PT-2022-19753 · Unknown · Qsmart Next

Name of the Vulnerable Software and Affected Versions: Qsmart Next version 4.1.2 Description: A cross-site scripting XSS issue was discovered. This issue allows attackers to inject malicious scripts into websites, potentially leading to unauthorized access or control. Recommendations: For Qsmart...

Qsmart Next 跨站脚本漏洞

Qsmart Next is a free smartphone application from Qsmart Inc. A security vulnerability exists in Qsmart Next version v4.1.2, which can be exploited by an attacker to inject malicious scripts into other benign and trusted websites...

CVE-2022-39814

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

CVE-2022-39814

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

CVE-2022-39814: URL Redirection to Untrusted Site

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

CVE-2022-25295

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

PT-2022-17191 · Gophish · Gophish

Name of the Vulnerable Software and Affected Versions: gophish versions prior to 0.12.0 Description: The issue exists in the next query parameter, where the application uses url.Parser.FormValue"next" to extract the path and redirect the user to a relative URL. However, if the next parameter star...

CVE-2022-25295: URL Redirection to Untrusted Site

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

UBUNTU-CVE-2021-40648

In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fdnextsize, bknextsize of the current chunk. The next chunk is then freed later on, causing a freeing of an arbitrary amount of memory...

man2html 输入验证错误漏洞

man2html is a pure manroff to html converter developed by HAMANO Tsukasa in Japan. A security vulnerability exists in man2html version 1.6g, which can be exploited to overwrite the previous size parameter of the next block and the fd, bk, fdnextsize, bknextsize parameters of the current block wit...

Malicious Package

Overview metamask-docs-next is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

DRUPAL-CONTRIB-2022-054

The Next.js module provides an inline preview for content. Authenticated requests are made to Drupal to fetch JSON:API content and render them in an iframe from the decoupled Next.js site. The current implementation doesn’t sufficiently check access for fetching data. All requests made to Drupal...

CVE-2022-36053 Out-of-bounds read in the uIP buffer module

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a buffer module os/net/ipv6/uipbuf.c that processes IPv6 extension headers in incoming data packets. As part of this processing, the function...

PYSEC-2022-43188

Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...

PYSEC-2022-43188

Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...

CVE-2022-36046

Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict "unhandledRejection" exiting AND using next start or a "custom serve...

CVE-2022-36046 Unexpected server crash in Next.js version 12.2.3

Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...

CVE-2022-36046: Uncaught Exception

Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...

GHSA-WFF4-FPWG-QQV3 Unexpected server crash in Next.js

Impact When specific requests are made to the Next.js server it can cause an unhandledRejection in the server which can crash the process to exit in specific Node.js versions with strict unhandledRejection handling. - Affected: All of the following must be true to be affected by this CVE - Node.j...