11672 matches found
Code injection
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 199149...
IBM Jazz Team Server 安全漏洞
IBM Jazz Team Server is an application server from IBM Corporation of America. IBM Jazz Team Server provides base services that enable a group of tools to work together as a single logical server, and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.An...
Malicious Package
Overview solar-stellarorg-pages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious Package
Overview cap-common-pages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
CVE-2021-20551
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 199149...
PT-2022-22064 · Jenkins +1 · Jenkins +2
Name of the Vulnerable Software and Affected Versions: Jenkins Repository Connector Plugin versions 2.2.0 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the Jenkins Repository Connector Plugin does not escape the name and description of...
MAL-2022-5461 Malicious code in privacy-test-pages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff6449f83069ebd3c01de088bc5826b6f3e1bed524b9dec15fe8ca715f0a9b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in privacy-test-pages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff6449f83069ebd3c01de088bc5826b6f3e1bed524b9dec15fe8ca715f0a9b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-25121
The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service on the post/page when a user submit such rating...
CVE-2022-31734
Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.250SY...
Malicious code in action-publish-gh-pages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a74ffd02c6f641086cd42add073f54fb155173390cde20c495999e563ff0471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-833 Malicious code in action-publish-gh-pages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a74ffd02c6f641086cd42add073f54fb155173390cde20c495999e563ff0471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pages-plugins (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfe3d4394aecb07bd6acf8c1e4b1bad280125dda893323a1029ce6a468600546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5190 Malicious code in pages-plugins (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfe3d4394aecb07bd6acf8c1e4b1bad280125dda893323a1029ce6a468600546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2283 Malicious code in custom-pages-react-boilerplate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4949c8e4aa1b5121f3d6fe2ff897aa6d5368a75a8959d2d9f4b30e9fd68d3a41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cisco AppDynamics Controller Authorization Issues Vulnerability
Cisco AppDynamics Controller is Cisco's ability to monitor and analyze full-stack data through accurate tracking and analysis across a highly distributed application environment. Cisco AppDynamics Controller suffers from an authorization issue vulnerability that arises from incorrect authorizatio...
Cisco AppDynamics Controller 安全漏洞
Cisco AppDynamics Controller is Cisco's ability to monitor and analyze full-stack data through accurate tracking and analysis across a highly distributed application environment. Cisco AppDynamics Controller suffers from an authorization issue vulnerability that arises from incorrect authorizatio...
CVE-2022-31403
CVE-2022-31403 affects the IT service management platform iTop (notably v3.0.x, with the core issue reported as an XSS via /itop/pages/ajax.render.php). The Red Hat advisory confirms the existence of an XSS vulnerability in ITOP 3.0.1, with public-facing impact described as cross-site scripting. ...
Description of the security update for SharePoint Server Subscription Edition: June 14, 2022 (KB5002224)
None None...
IBM Spectrum Copy Data Management反向钓鱼攻击漏洞
IBM Spectrum Copy Data Management, an IBM company that modernizes, streamlines and automates data center copy management processes, is vulnerable to a phishing attack in IBM Spectrum Copy Data Management versions 2.2.0.0 through 2.2.15.0. The vulnerability stems from allowing pages linked to from...