539 matches found
CVE-2023-46483: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function...
Malicious code in gatsby-remark-images-uploadcare (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfedda25b5f48c47bf9fe91a2cc6ca0cd8ed5086ecf715776b934cabd3b554ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-467 Malicious code in gatsby-remark-images-uploadcare (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfedda25b5f48c47bf9fe91a2cc6ca0cd8ed5086ecf715776b934cabd3b554ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2023-20923 · Tenda · Tenda V15V1.0
Name of the Vulnerable Software and Affected Versions: Tenda V15V1.0 version V15.11.0.141521 3190 1058 Description: A buffer overflow issue was discovered via the wifiFilterListRemark parameter in the modifyWifiFilterRules function, allowing attackers to cause a Denial of Service DoS via a crafte...
Arbitrary Code Injection
gatsby-transformer-remark is vulnerable to Arbitrary Code Injection. The vulnerability is due to the gray-matter package which is used in parsing and is vulnerable in the default configuration, allowing an attacker to inject and execute unsanitized JavaScript codes...
CVE-2023-22491
Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...
UBUNTU-CVE-2023-22491
Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...
CVE-2023-22491 gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection
Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...
CVE-2023-22491
The CVE-2023-22491 entry concerns the Gatsby gatsby-transformer-remark plugin, affected in versions prior to 5.25.1 and 6.3.2. The vulnerability arises when the plugin passes input to gray-matter in data mode, allowing JavaScript injection in its default configuration if input is not sanitized; i...
CVE-2023-22491: Improper Neutralization of Special Elements used in an SQL Command
Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...
CVE-2023-22491
Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...
gatsby-transformer-remark has possible unsanitized JavaScript code injection
Impact The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default configuration, unless input is sanitized. The vulnerability is present in gatsby-transformer-remark when...
@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.1) potentially affected by CVE-2023-22491 via gatsby-transformer-remark (6.0.0)
gatsby-transformer-remark NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby-transformer-remark and may be impacted: - @boomerang-io/gatsby-theme-boomerang =1.5.0-beta.0, =1.6.1 Source cves: CVE-2023-22491 Source advisory:...
GHSA-7CH4-RR99-CQCW gatsby-transformer-remark has possible unsanitized JavaScript code injection
Impact The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default configuration, unless input is sanitized. The vulnerability is present in gatsby-transformer-remark when...
@boomerang-io/gatsby-theme-boomerang (>=0.3.0-beta.0, <=1.4.2), @dcl/docs-site (>=1.0.0-3010867520.commit-1740972, <=1.0.0-20220919140413.commit-6dee65c) +5 more potentially affected by CVE-2023-22491 via gatsby-transformer-remark (>=5.4.0, <=5.23.1)
gatsby-transformer-remark NPM version =5.4.0, =0.3.0-beta.0, =1.0.0-3010867520.commit-1740972, =1.1.1, =1.18.5, =0.0.1, =0.1.1 - gatsby-starter-netlify-tailwind 1.1.0 Source cves: CVE-2023-22491 Source advisory: OSV:GHSA-7CH4-RR99-CQCW...
CVE-2022-45720
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function...
CVE-2022-45720
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function...
CVE-2022-45720: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function...
PT-2022-27634 · Ip Com · Ip-Com M50
Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: The issue is related to multiple buffer overflows that can occur via the ip, mac, and remark parameters in the formIPMacBindModify function. Recommendations: For IP-COM M50 version...