BD Alaris System with Guardrails Suite MX

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION : Low attack complexity Vendor : Becton, Dickinson and Company BD Equipment : Alaris PCU, Guardrails Editor, Systems Manager, Calculation Services, CQI Reporter Vulnerabilities : Insufficient Verification of Data Authenticity, Missing...

BD Alaris System with Guardrails Suite MX 安全漏洞

The BD Alaris System with Guardrails Suite MX is a medical device from Biddy Medical BD, Inc. A security vulnerability exists in the BD Alaris System with Guardrails Suite MX, which stems from an insecure connection between the Systems Manager and CQI Reporter applications that could expose...

PT-2023-22793 · Unknown · Systems Manager +1

Name of the Vulnerable Software and Affected Versions: Systems Manager affected versions not specified CQI Reporter application affected versions not specified Description: The issue is related to an insecure connection between Systems Manager and the CQI Reporter application, which could...

catmaster.se Cross Site Scripting vulnerability OBB-3468912

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

deseti-prsty.cz Cross Site Scripting vulnerability OBB-3442341

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

korte-kultura.net Cross Site Scripting vulnerability OBB-3440335

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dooaxghjxeokcv5.mee.nu Cross Site Scripting vulnerability OBB-3424694

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

votingstation.net Cross Site Scripting vulnerability OBB-3398356

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview @tabby.ai/qaseio-playwright-reporter is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

iportwine.com Cross Site Scripting vulnerability OBB-3371559

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross-site Scripting (XSS)

eslint-detailed-reporter is vulnerable to Cross-site Scripting XSS. The vulnerability exists in renderIssue function in template-generator.js because the issue message is not properly escaped when rendering issues which allows an attacker to inject and execute arbitrary JavaScript...

GHSA-4XR4-89M5-46C7 eslint-detailed-reporter vulnerable to cross-site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

eslint-detailed-reporter vulnerable to cross-site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

@goboomtown/entities (>=0.0.14-beta, <=0.0.18-beta), @goboomtown/entities-nest (>=0.0.28-beta, <=0.0.82-beta) +5 more potentially affected by CVE-2022-4942 via eslint-detailed-reporter (>=0.6.10, <=0.8.0)

eslint-detailed-reporter NPM version =0.6.10, =0.0.14-beta, =0.0.28-beta, =0.0.9-beta, =1.0.4, =0.4.0, =1.0.0, =1.0.0, =1.0.7 Source cves: CVE-2022-4942 Source advisory: OSV:GHSA-4XR4-89M5-46C7...

CVE-2022-4942

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

Cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942

CVE-2022-4942 affects mportuga eslint-detailed-reporter up to version 0.9.0. The vulnerability is in renderIssue (lib/template-generator.js) where the message argument is not properly escaped, enabling cross-site scripting. Exploitation may be remote. Patch 505c190efd4905990db6207863bdcbd9b1d7e1b...

CVE-2022-4942 mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942 mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

eslint-detailed-reporter 跨站脚本漏洞

eslint-detailed-reporter is a detailed HTML reporting program for ESLINT by the individual developer Marcelo Sauerbrunn Portugal. A cross-site scripting vulnerability exists in eslint-detailed-reporter prior to version 0.9.0, which stems from a security issue in the function renderIssue in the...