543 matches found
CVE-2022-2772: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Apartment Visitor Management System and classified as critical. Affected by this issue is some unknown functionality of the file action-visitor.php. The manipulation of the argument editid/remark leads to sql injection. The attack may be launched...
Apartment Visitor Management System SQL注入漏洞
Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. Apartment Visitor Management System suffers from a SQL injection vulnerability that stems from some unknown functionality in the file action-visitor.php being affected, where...
MAL-2022-3284 Malicious code in gatsby-remark-gifplayer-transformer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24f738254038f89f0dfffb77eac814848c029453d9187c76e9bb34ced3110e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gatsby-remark-gifplayer-transformer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24f738254038f89f0dfffb77eac814848c029453d9187c76e9bb34ced3110e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
@hey_joz/gatsby-source-netlify-cms (>=0.0.10, <=0.0.11), @hey_joz/gatsby-theme-netlify-cms (>=0.0.10, <=0.0.11) +1 more potentially affected by CVE-2021-39199 via remark-html (14.0.0)
remark-html NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on remark-html and may be impacted: - @heyjoz/gatsby-source-netlify-cms =0.0.10, =0.0.10, =0.1.0, =0.1.1 Source cves: CVE-2021-39199 Source advisory: OSV:GHSA-9Q5W-79CV-947M...
@anemone/newline-use-comments (3.0.0), @elastic/docsmobile (>=0.0.0-verceltest.1, <=2.0.3-rc.1) +10 more potentially affected by CVE-2021-39199 via remark-html (13.0.1)
remark-html NPM version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on remark-html and may be impacted: - @anemone/newline-use-comments 3.0.0 - @elastic/docsmobile =0.0.0-verceltest.1, =1.3.6, =0.0.0, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =7.0.0,...
Unsafe defaults in `remark-html`
Impact The documentation of remark-html has mentioned that it was safe by default. In practise the default was never safe and had to be opted into. This means arbitrary HTML can be passed through leading to potential XSS attacks. Patches The problem has been patched in 13.0.2 and 14.0.1:...
GHSA-9Q5W-79CV-947M Unsafe defaults in `remark-html`
Impact The documentation of remark-html has mentioned that it was safe by default. In practise the default was never safe and had to be opted into. This means arbitrary HTML can be passed through leading to potential XSS attacks. Patches The problem has been patched in 13.0.2 and 14.0.1:...
CVE-2021-39199
remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...
CVE-2021-39199
remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...
CVE-2021-39199
remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...
Design/Logic Flaw
remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...
CVE-2021-39199
CVE-2021-39199 concerns the remark-html Node.js library. The root cause is unsafe default behavior: user input could bypass sanitization, allowing arbitrary HTML and potential XSS. The vulnerability is addressed in versions 13.0.2 and 14.0.1 where safe-by-default behavior was implemented, alignin...
CVE-2021-39199 Cross site scripting via unsafe defaults in remark-html
remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...
CVE-2021-39199: Improper Neutralization of Input During Web Page Generation
remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...
Github remark-html 跨站脚本漏洞
Github remark-html is a remark plugin that serializes Markdown to HTML. remark-html suffers from a cross-site scripting vulnerability that stems from software that does not validate and escape user input. This means that passing arbitrary HTML can lead to potential XSS attacks...
CVE-2020-19204: Improper Neutralization of Input During Web Page Generation
An authenticated Stored Cross-Site Scriptiong XSS vulnerability exists in Lightning Wire Labs IPFire 2.21 x8664 - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripti...
Lightning Wire Labs IPFire 跨站脚本漏洞
Lightning Wire Labs IPFire is a Linux-based open source firewall from Lightning Wire Labs. It focuses on securing your network while being easy to operate and maintain. It offers many features such as VPN, advanced firewall configuration, and of course great performance in all environments. A...