EUVD-2023-1782

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-14954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection. CVE-2019-14954 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2023-3431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9. CVE-2023-3431 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2023-3500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all version...

CVE-2020-36523

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : PlantUML vulnerability (USN-7353-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7353-1 advisory. Tobias S. Fink discovered that PlantUML was susceptible to cross-site scripting attacks XSS in instances...

Ubuntu: Security Advisory (USN-7353-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7353-1 plantuml vulnerability

Tobias S. Fink discovered that PlantUML was susceptible to cross-site scripting attacks XSS in instances where SVG images were rendered. An attacker could possibly use this issue to cause PlantUML to crash, resulting in a denial of service, or the execution of arbitrary code...

USN-7353-1: PlantUML vulnerability

Tobias S. Fink discovered that PlantUML was susceptible to cross-site scripting attacks XSS in instances where SVG images were rendered. An attacker could possibly use this issue to cause PlantUML to crash, resulting in a denial of service, or the execution of arbitrary code...

Fedora 37 : plantuml (2022-5f32512090)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-5f32512090 advisory. Automatic update for plantuml-1.2022.4-1.fc37. Changelog Mon Apr 18 2022 Sandipan Roy - 1:1.2022.4-1 - Updated version to 1.2022.4 - Added fix for...

Fedora 37 : plantuml (2022-ddfd750ade)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-ddfd750ade advisory. Automatic update for plantuml-1.2022.5-1.fc37. Changelog Mon May 16 2022 Sandipan Roy - 1:1.2022.5-1 - Updated version to 1.2022.5 - Added fix for rhbz208639...

Fedora: Security Advisory (FEDORA-2023-731133ab8e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PlantUML 1.2024.6 Cross Site Scripting

Exploit Title: PlantUML version 1.2024.6 Cross Site Scripting XSS Date: 23/08/2024 Exploit Author: Hosein Vita Vendor Homepage: https://plantuml.com/ Version: 1.2024.6 Tested on: Linux Description: This proof-of-concept demonstrates a Cross-Site Scripting XSS vulnerability in PlantUML. The...

OPENSUSE-SU-2024:12011-1 plantuml-1.2022.4-1.1 on GA media

These are all security issues fixed in the plantuml-1.2022.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12080-1 plantuml-1.2022.5-1.1 on GA media

These are all security issues fixed in the plantuml-1.2022.5-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora: Security Advisory for plantuml (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BIT-GITLAB-2023-3500 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to...

Fedora 39 : plantuml (2023-731133ab8e)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-731133ab8e advisory. Update plantuml to the latest version v1.2023.11. This update also includes fixes for CVE-2023-3431 and CVE-2023-3432. Tenable has extracted the...

Cross-site Scripting (XSS)

gitlab isvulnerable to Cross-site Scripting XSS. The vulnerability occurs during the creation of specific PlantUML diagrams, enabling an attacker to inject and execute malicious JavaScript...

[SECURITY] Fedora 39 Update: plantuml-1.2023.11-1.fc39

PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case...