CVE-2024-32005

NiceGUI is an easy-to-use, Python-based UI framework. A local file inclusion is present in the NiceUI leaflet component when requesting resource files under the /nicegui/version/resources/key/path:path route. As a result any file on the backend filesystem which the web server has access to can be...

CVE-2024-32005

CVE-2024-32005 : Local File Inclusion in NiceGUI’s leaflet component allows reading any backend file accessible to the web server via requests to /_nicegui/{version }/resources/{key}/{path:path}. Affected upstream: NiceGUI before 1.4.21. Impact: arbitrary file read on the server. Remediation: upg...

CVE-2024-32005 Local File Inclusion in NiceGUI leaflet component

NiceGUI is an easy-to-use, Python-based UI framework. A local file inclusion is present in the NiceUI leaflet component when requesting resource files under the /nicegui/version/resources/key/path:path route. As a result any file on the backend filesystem which the web server has access to can be...

Oracle Siebel < 23.4 (April 2023 CPU)

The remote Oracle Siebel install is affected by a vulnerability: - Vulnerability in the Siebel CRM product of Oracle Siebel CRM component: UI Framework. Supported versions that are affected are 23.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via...

Malicious code in pcorbr-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42c2ab222c8542659c5bf7b3e2daeea4be95818c1e0d0c186b7bce8abfa462a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the UI Framework component of the Oracle Siebel CRM system’s customer relationship management software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UI Framework component of the Oracle Siebel CRM system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2023-21909

Vulnerability in the Siebel CRM product of Oracle Siebel CRM component: UI Framework. Supported versions that are affected are 23.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM. Successful attacks of this...

PT-2023-2499 · Oracle · Oracle Siebel Crm

Name of the Vulnerable Software and Affected Versions: Oracle Siebel CRM versions prior to 23.3 Description: The issue is related to insufficient input validation in the UI Framework component of Oracle Siebel CRM, allowing a low-privileged attacker with network access via HTTP to compromise the...

SUSE CVE-2012-3229

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Siebel Documentation...

SUSE CVE-2012-3230

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Portal Framework...

Cross site scripting

A vulnerability classified as problematic has been found in OpenMRS HTML Form Entry UI Framework Integration Module up to 1.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.0 is able to addres...

CVE-2021-4284

OpenMRS HTML Form Entry UI Framework Integration Module (up to 1.x) contains a cross-site scripting vulnerability. The affected component is tied to the Single-Input UI Framework Integration Module, with remote initiation possible and no specific affected version beyond 1.x identified in the prov...

PT-2022-11701 · Openmrs · Openmrs Html Form Entry Ui Framework Integration Module

Name of the Vulnerable Software and Affected Versions: OpenMRS HTML Form Entry UI Framework Integration Module versions up to 1.x Description: A vulnerability has been found in the OpenMRS HTML Form Entry UI Framework Integration Module, which affects an unknown part and leads to cross-site...

MAL-2022-2406 Malicious code in deere-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6940c9549e013e891d99e764d6bb8489338b51a629bb4f4c4976b3b34213927 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview deere-ui-framework is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview vfdp-ui-framework is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in atlas-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc726ce71830a76a4cf4537cddb3eb056493e887aa77c9011a189917312244fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1159 Malicious code in atlas-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc726ce71830a76a4cf4537cddb3eb056493e887aa77c9011a189917312244fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vfdp-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbec8a67f35b3818c460dda1ea50d11d5efa904af9b405723ae3d0ca3d2f0e05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6909 Malicious code in vfdp-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbec8a67f35b3818c460dda1ea50d11d5efa904af9b405723ae3d0ca3d2f0e05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...