CVE-2019-7967

Technical details for CVE-2019-7967 are not provided in the connected documents. The entry remains reserved/no public details here. Monitor for updates as information may be released later.

CVE-2019-7966

CVE-2019-7966 details are not provided in the supplied documents. No product, impact, or remediation information is available. Monitor for updates from official disclosures.

CVE-2016-1000233

CVE-2016-1000233 is a Swagger-UI cross-site scripting vulnerability described in the connected IBM bulletin. The issue arises when a Content-Type: application/javascript header is included while Swagger-UI processes a URL query string parameter, allowing a remote attacker to inject and execute ma...

CVE-2016-1000227

CVE-2016-1000227 is a reserved placeholder entry; connected advisories describe a cross-site scripting vulnerability in bootstrap-tagsinput. All versions are affected by unsanitized input passed to the itemTitle parameter, leading to XSS. The issue is not actively maintained (last updates circa 2...

CVE-2013-3364

CVE-2013-3364 aligns with a GitHub advisory and OSV entry describing unauthenticated remote command injection in the ep_imageconvert plugin for Etherpad Lite. The vulnerability affects ep_imageconvert

CVE-2016-1000241

The CVE entry (CVE-2016-1000241) is linked to a known XSS vulnerability in pivottable. Affected software: pivottable (JavaScript library). Issue: a new rendering mechanism for JSON elements introduces cross-site scripting, enabling injection through JSON-rendered content. References from connecte...

CVE-2016-1000230

CVE-2016-1000230 : The connected advisories describe an XSS vulnerability in the client-side rendering of Rendr templates inside a _block, with server-side rendering unaffected. Affected versions of Rendr are vulnerable to cross-site scripting when client-side rendering occurs in that block conte...

CVE-2014-8882

The connected advisories identify a Regular Expression Denial of Service in the validator library’s isURL method affecting versions prior to 3.22.1; remediation is to update to 3.22.1 or later (GHSA-f5w6-r7rg-mcgq, OSV GHSA, and NODEJS advisory 42 reference validator.js). No exploitation details ...

CVE-2016-1000228

Summary: The provided connected advisories describe a DOM-based XSS vulnerability in the npm package Gmail.js (gmail-js). Affected versions contain unsafe handling in the functions tools.parse_response, helper.get.visible_emails_post, and helper.get.email_data_post, which pass user input directly...

CVE-2015-4130

Consolidated details show CVE-2015-4130’s connected advisories describe a command-injection vulnerability in ungit (URL parameter) affecting versions prior to 0.9.0. Affected software: ungit. Root cause: command injection via the url parameter. Impact: not explicitly quantified in the provided do...

CVE-2016-1000234

The CVE-2016-1000234 entry maps to a Cross-Site Scripting issue in the jqTree component. Connected advisories (GHSA-GJHX-GXWX-JX9J and OSV) describe that affected versions of jqtree are vulnerable to XSS via the drag-and-drop operation when modifying tree data, allowing script content within a no...

CVE-2016-1000225

The connected advisories identify a SQL Injection vulnerability in Sequelize involving models with the GEOMETRY DataType and GeoJSON handling. Specifically, unescaped single quotes in GeoJSON documents processed by ST_GeomFromGeoJSON (and GeomFromText for MySQL) allow injection in affected models...

CVE-2019-19723

CVE-2019-19723 has connected details: All versions of the npm package passport-cognito are vulnerable to Improper Authorization due to failure to properly scope authorization-related variables (access token, refresh token, ID token). This creates a race condition where concurrent authenticated us...

CVE-2013-7035

Technical details for CVE-2013-7035 are not publicly available in the provided documents; the CVE entry appears reserved. Monitor for updates.

CVE-2021-30492

The connected documents describe a real issue: zendesk_api_client_php is vulnerable to Server-Side Request Forgery (SSRF) because it does not validate the provided Zendesk subdomain in getAuthUrl and getAccessToken. Impact is that an attacker could cause arbitrary HTTP requests from the server. R...

CVE-2022-219862

CVE-2022-219862 corresponds to a vulnerability in ASP.NET Core related to HTTP headers pooling that can lead to a denial of service. Connected advisories show affected packages across multiple Linux distributions: MiracleLinux 8: dotnet5.0-5.0.211-1.el8.ML.1 (AXSA:2022-3061:07) — specific package...

CVE-2008-1418

Technical details for CVE-2008-1418 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here; monitor for updates from official advisories.

CVE-2015-6842

Technical details about CVE-2015-6842 are not publicly available in the provided documents. The connected Nessus plugin describes unrelated FreeBSD OTRS PID-file permissions but does not tie to this CVE. Monitor for updates.

CVE-2018-15860

Technical details for CVE-2018-15860 are not provided in the supplied documents. The entry appears reserved with no public details. Monitor for updates.

CVE-2021-11193

Technical details for CVE-2021-11193 are not publicly available in the provided documents. Monitor for updates.