446 matches found
PT-2024-40116 · Prism +1 · Prism +1
Name of the Vulnerable Software and Affected Versions: codehighlight extension affected versions not specified Description: The issue concerns a vulnerable version of the 3rd party JavaScript component prism bundled with the codehighlight extension, which is susceptible to Regular expression Deni...
PT-2024-40069 · Prism +1 · Prism +1
Name of the Vulnerable Software and Affected Versions: codehighlight extension affected versions not specified Description: The issue concerns a vulnerable version of the 3rd party JavaScript component prism bundled with the codehighlight extension, which is susceptible to Regular expression Deni...
CVE-2024-31122
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prism IT Systems User Rights Access Manager allows Reflected XSS.This issue affects User Rights Access Manager: from n/a through 1.1.2...
CVE-2024-31122 WordPress User Rights Access Manager plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prism IT Systems User Rights Access Manager allows Reflected XSS.This issue affects User Rights Access Manager: from n/a through 1.1.2...
CVE-2024-31122
CVE-2024-31122 is a Reflected XSS in the WordPress plugin User Rights Access Manager . The vulnerability arises from improper neutralization of input during web page generation, leading to cross-site scripting in the affected page. The description states that the issue affects User Rights Access ...
CVE-2024-31122 WordPress User Rights Access Manager plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prism IT Systems User Rights Access Manager allows Reflected XSS.This issue affects User Rights Access Manager: from n/a through 1.1.2...
Malicious code in prism-commercial-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 022a3875aaf0406fa69c720352856a350f48f0b350caf1e5bb66717663d7a078 The OpenSSF Package Analysis project identified 'prism-commercial-ui' @ 100.100.100 npm as malicious. It is considered malicious because: - The...
MAL-2024-984 Malicious code in prism-commercial-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 022a3875aaf0406fa69c720352856a350f48f0b350caf1e5bb66717663d7a078 The OpenSSF Package Analysis project identified 'prism-commercial-ui' @ 100.100.100 npm as malicious. It is considered malicious because: - The...
New NSA Information from (and About) Snowden
Interesting article about the Snowden documents, including comments from former Guardian editor Ewen MacAskill MacAskill, who shared the Pulitzer Prize for Public Service with Glenn Greenwald and Laura Poitras for their journalistic work on the Snowden files, retired from The Guardian in 2018. He...
MAL-2023-35 Malicious code in @cima/prism-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f49996021053433e43b19a3a4ae21a731784fc9b4d053c1ee07dea4613dd76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @cima/prism-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f49996021053433e43b19a3a4ae21a731784fc9b4d053c1ee07dea4613dd76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-28423
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Prism Tech Studios Modern Footnotes plugin = 1.4.15 versions...
CVE-2023-28423
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Prism Tech Studios Modern Footnotes plugin = 1.4.15 versions...
CVE-2023-28423
CVE-2023-28423: Stored XSS in Prism Tech Studios Modern Footnotes WordPress plugin
Security Bulletin: There is a vulnerability in Prism used by IBM Maximo Asset Management (CVE-2022-23647)
Summary There is a vulnerability in Prism used by IBM Maximo Asset Management. Vulnerability Details CVEID:CVE-2022-23647 DESCRIPTION: Prism.js Prism is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the Command line plugin. A remote attacker could...
Malicious Package
Overview stylelint-config-prism is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious Package
Overview prism-subapps-react-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...
Malicious Package
Overview eslint-config-prism is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...
