231 matches found
nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
Summary The navigateTo function attempts to blockthe javascript: protocol, but does not correctly use API's provided by unjs/ufo. This library also contains parsing discrepancies. Details The function first tests to see if the specified URL has a protocol. This uses the unjs/ufo package for URL...
GHSA-VF6R-87Q4-2VJF nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
Summary The navigateTo function attempts to blockthe javascript: protocol, but does not correctly use API's provided by unjs/ufo. This library also contains parsing discrepancies. Details The function first tests to see if the specified URL has a protocol. This uses the unjs/ufo package for URL...
CVE-2024-34343: Improper Neutralization of Input During Web Page Generation
Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. The navigateTo function attempts to blockthe javascript: protocol, but does not correctly use API's provided by unjs/ufo. This library also contains parsing discrepancies. The function first...
PT-2024-25800 · Unjs/Ufo +1 · Unjs/Ufo +1
Name of the Vulnerable Software and Affected Versions: Nuxt versions prior to 3.12.4 Description: The navigateTo function does not correctly use APIs provided by unjs/ufo, leading to parsing discrepancies. The function first checks if a URL has a protocol using the unjs/ufo package, which works...
MAL-2024-3253 Malicious code in ufo-rocks2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3374b9d8ce913176fed7916c9adf5e5239b09aed801473ef2363bdf190f1c8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ufo-rocks2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3374b9d8ce913176fed7916c9adf5e5239b09aed801473ef2363bdf190f1c8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ufo-helpers (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3252 Malicious code in ufo-helpers (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE CVE-2024-36933
In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb-protocol,data,macheader for outer header in nshgsosegment. syzbot triggered various splats see 0 and links by a crafted GSO packet of VIRTIONETHDRGSOUDP layering the following protocols: ETHP8021AD + ETHPNSH +...
RHEL 5 : kernel (RHSA-2019:1931)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1931 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Exploitable memory corruption due to UF...
The 4 Big Questions the Pentagon’s New UFO Report Fails to Answer
The Pentagon says it’s not hiding aliens, but it stops notably short of saying what it is hiding. Here are the key questions that remain unanswered—some answers could be weirder than UFOs...
Malicious code in schibsted-ufo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a28167ab8729dd1bbb8263b5862e431e6df15135343db190e75aab652e104eea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8525 Malicious code in schibsted-ufo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a28167ab8729dd1bbb8263b5862e431e6df15135343db190e75aab652e104eea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview ufo-rocks2 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Malicious Package
Overview ufo-helpers is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
K60250153: Linux kernel vulnerability CVE-2017-1000112
Security Advisory Description Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSGMORE ipappenddata calls ipufoappenddata to append. However in between two send calls, the append path can be switched from UFO to non-UFO one, which lead...
The More You Look for Spy Balloons, the More UFOs You’ll Find
No, there’s not a sudden influx of unidentified objects in the skies above the US—but the government is paying closer attention...
Mageia: Security Advisory (MGASA-2017-0278)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...