144 matches found
CVE-2023-32129
Missing Authorization vulnerability in Sparkle WP Editorialmag editorialmag.This issue affects Editorialmag: from n/a through 1.1.9...
CVE-2023-32129
CVE-2023-32129 : Editorialmag WordPress theme contains a Missing Authorization weakness in Editorialmag (
PT-2024-12297 · Sparkle Wp · Editorialmag
Name of the Vulnerable Software and Affected Versions: Editorialmag versions 1.1.9 and earlier Description: The issue is related to a Missing Authorization vulnerability in Sparkle WP Editorialmag. Recommendations: For versions 1.1.9 and earlier, update to a version later than 1.1.9 to resolve th...
PT-2025-3930
Name of the Vulnerable Software and Affected Versions Sparkle versions prior to 2.6.4 Description A security issue was found in Sparkle, where an attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks. This allows the attacker to potentially...
CVE-2023-30480
Missing Authorization vulnerability in Sparkle WP Educenter.This issue affects Educenter: from n/a through 1.5.5...
CVE-2023-30480
CVE-2023-30480 covers a Missing Authorization/Broken Access Control in the Sparkle WP Educenter theme (Educenter
PT-2024-12238 · WordPress · Sparkle Wp Educenter
Name of the Vulnerable Software and Affected Versions: Sparkle WP Educenter versions 1.5.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in Sparkle WP Educenter. Recommendations: For Sparkle WP Educenter versions 1.5.5 and earlier, update to a version that...
Security Bulletin: IBM Security Verify Governance is vulnerable to denial of service (CVE-2022-24839)
Summary IBM Security Verify Governance is vulnerable to a denial of service vulnerability within the Sparkle Motion Nokogiri package. The issue was addressed by upgrading the vulnerable package. Vulnerability Details CVEID:CVE-2022-24839 DESCRIPTION: Sparkle Motion Nokogiri is vulnerable to a...
Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to HTTP header injection and affected by denial of services due to multiple vulnerabilities.
Summary IBM WebSphere Application Server Liberty for IBM i is vulnerable to an HTTP header injection caused by improper validation, and affected by a denial of service in GraphQL Java, a denial of service in CyberNeko HTML, and a denial of service in protobuf-java as described in the vulnerabilit...
Security Bulletin: IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty vulnerable because Sparkle Motion Nokogiri is vulnerable to a denial of service, (CVE-2022-24839)
Summary IBM PowerVM Novalink is vulnerable because IBM WebSphere Application Server Liberty vulnerable to Sparkle Motion Nokogiri is vulnerable to a denial of service, caused by a java.lang.OutOfMemoryError exception when parsing ill-formed HTML markup in the fork of org.cyberneko.html. By sendin...
Mechanize 信息泄露漏洞
Mechanize is an open source ruby library from Sparkle Motion. It is used to automate interactions with websites. A security vulnerability exists in versions of Mechanize prior to 2.8.5 that stems from an authorization header that leaks after redirecting to a different port on the same site...
CVE-2021-20084
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype...
CVE-2021-20084
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype...
CVE-2021-20084
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype...
Buffer overflow
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype...
CVE-2021-20084
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype...
CVE-2021-20084
CVE-2021-20084 affects jquery-sparkle version 1.5.2-beta, where an improperly controlled modification of Object.prototype leads to prototype pollution. The root cause is injection of properties into Object.prototype, enabling manipulation of derived objects and potential downstream impact. CVSS m...
jquery-sparkle 安全漏洞
jquery-sparkle is an application. jQuery's "Don't Repeat Yourself" plugin/effects framework. A security vulnerability exists in jquery-sparkle 1.5.2-beta, which arises from an improperly controlled modification that allows a malicious user to inject properties into Object...
PT-2021-13762 · Unknown · Jquery-Sparkle
Name of the Vulnerable Software and Affected Versions: jquery-sparkle version 1.5.2-beta Description: The issue is related to 'Prototype Pollution' in the jquery-sparkle library, allowing a malicious user to inject properties into Object.prototype. Recommendations: For jquery-sparkle version...
Sparkle Motion Mechanize Operating System Command Injection Vulnerability
Sparkle Motion Mechanize is a Ruby-based codebase used by the Sparkle Motion organization to support the Web for automated interactions. Mechanize suffers from an operating system command injection vulnerability that allows the injection of operating system commands using several class methods th...