CVE-2022-36116

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the setValidationInfo...

CVE-2022-36118

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the SetProcessAttributes...

CVE-2022-36120

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the getChartData administrative...

CVE-2022-36117

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for an administrative function. If...

GHSA-968P-4WVH-CQC8 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, prism, ts-patch, kubeflow-katib, argo-workflows...

CVE-2025-27789 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, prism, ts-patch, kubeflow-katib, argo-workflows...

Linux Distros Unpatched Vulnerability : CVE-2024-53382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prism aka PrismJS through 1.29.0 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript, becau...

Prism 代码注入漏洞

Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. A security vulnerability exists in Prism 1.29.0 and earlier versions, which stems from the fact that document.currentScript lookups can be obscured by an attacker's...

PT-2025-9273

Name of the Vulnerable Software and Affected Versions Prism aka PrismJS versions prior to 1.29.0 Description The issue allows DOM Clobbering, which can result in XSS for untrusted input that contains HTML but does not directly contain JavaScript. This occurs because the document.currentScript...

CVE-2024-53742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prism I.T. Systems Multilevel Referral Affiliate Plugin for WooCommerce multilevel-referral-plugin-for-woocommerce allows Reflected XSS.This issue affects Multilevel Referral Affiliate Plugin for...

CVE-2024-53742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prism I.T. Systems Multilevel Referral Affiliate Plugin for WooCommerce multilevel-referral-plugin-for-woocommerce allows Reflected XSS.This issue affects Multilevel Referral Affiliate Plugin for...

CVE-2024-37209

Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through 1.1.2...

CVE-2024-37209

CVE-2024-37209 affects the WordPress plugin User Rights Access Manager (

GHSA-PPPG-CPFQ-H7WR vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-katib, prism, kubeflow-pipelines...

GHSA-PPPG-CPFQ-H7WR vulnerabilities

Vulnerabilities for packages: prism, kubeflow-centraldashboard, kubeflow-pipelines, kubeflow-katib...

CVE-2024-21534 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-centraldashboard, kubeflow-pipelines, kubeflow-katib...

CVE-2024-21534 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-katib, prism, kubeflow-pipelines...

ABB Cylon Aspect 3.07.00 Remote Code Execution

ABB Cylon Aspect 3.07.00 networkDiagAjax.php Remote Code Execution Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.07.00 Summary: ASPECT is an award-winning scalable building energy management...

ABB Cylon Aspect 3.07.00 (networkDiagAjax.php) Remote Code Execution

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller suffers from an unauthenticated OS command...

Denial of Service in extension "Code Highlight" (codehighlight)

The codehighlight extension bundles a vulnerable version of the 3rd party JavaScript component “prism” which is known to be vulnerable against Regular expression Denial of Service ReDoS...