21069 matches found
Security Bulletin: IBM InfoSphere Information Server is vulnerable to stored cross-site scripting (CVE-2024-28795)
Summary A stored cross-site scripting vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-28795 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co...
GO-2024-2480 Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF in github.com/0xJacky/Nginx-UI
Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF in github.com/0xJacky/Nginx-UI. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
GO-2024-2481 Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature in github.com/0xJacky/Nginx-UI
Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature in github.com/0xJacky/Nginx-UI. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive report...
CVE-2023-42011
IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. IBM X-Force ID: 265508...
CVE-2023-42014 IBM Sterling B2B Integrator Standard Edition cross-site scripting
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure withi...
CVE-2023-42014 IBM Sterling B2B Integrator Standard Edition cross-site scripting
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure withi...
CVE-2023-42014
IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.2.0.2) is affected by CVE-2023-42014. A cross-site scripting flaw resides in the Web UI, where an authenticated user can inject arbitrary JavaScript to alter functionality and potentially disclose credentials within a trusted sessio...
CVE-2024-35153
CVE-2024-35153 is a cross-site scripting vulnerability in IBM WebSphere Application Server UI, enabling a privileged user to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Affected products: IBM WebSphere Application Server 8.5 and 9.0. The...
Security Bulletin: IBM Sterling B2B Integrator Standard Edition does not correctly restrict frame objects
Summary IBM Sterling B2B Integrator Standard Edition does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. Vulnerability Details CVEID:CVE-2023-42011...
MAL-2024-4697 Malicious code in WPF-UI-Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Modern.WinForm.UI (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Modern.UI2.WinForm (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Modern.UI (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Gսna.UI2.WіnForms (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Bunifu.UI.WіnFоrms (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Bunifu.UI.WinForms.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3949 Malicious code in wf-dbd-react-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0298d6396635472198baea5a751b125cd374bce845178bac3e4738ec1c2c73ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wf-dbd-react-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0298d6396635472198baea5a751b125cd374bce845178bac3e4738ec1c2c73ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...