MAL-2024-7076 Malicious code in @gds-web-ui/core (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @gds-web-ui/core (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3258 Malicious code in @esportal/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @esportal/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @epgu/ui (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3254 Malicious code in @epgu/ui (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @caesars-digital/ui-toolkit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3259 Malicious code in @caesars-digital/ui-toolkit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @caesars-digital/caesars-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1856 Malicious code in @caesars-digital/caesars-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-H26W-R4M5-8RRF CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`

Summary ZIP files uploaded to the server-side endpoint handling a CodeChecker store are not properly sanitized. An attacker can exercise a path traversal to make the CodeChecker server load and display files from an arbitrary location on the server machine. Details Target The vulnerable endpoint ...

CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`

Summary ZIP files uploaded to the server-side endpoint handling a CodeChecker store are not properly sanitized. An attacker can exercise a path traversal to make the CodeChecker server load and display files from an arbitrary location on the server machine. Details Target The vulnerable endpoint ...

Cross Site Scripting (XSS)

ezsystems/ezplatform-admin-ui is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient escaping of user-generated content within parts of the Admin UI, allowing attackers to inject malicious scripts that can then be executed within the context of other users' sessions o...

Huawei HarmonyOS and EMUI Feature Vulnerabilities

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A functional vulnerability exists in Huawei HarmonyOS and...

Huawei HarmonyOS and EMUI Silent Screenshot Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to a silent...

Huawei HarmonyOS and EMUI Out-of-Bounds Read Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to an...

CVE-2024-37350

There is a cross-site scripting vulnerability in the policy management UI of Absolute Secure Access prior to version 13.06. Attackers can interfere with a system administrator’s use of the policy management UI when the attacker convinces the victim administrator to follow a crafted link to the...

CVE-2024-37351

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Attackers with system administrator permissions can interfere with other system administrator’s use of the management UI when the second administrator later edits the same manageme...

CVE-2024-37352

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06 that allows attackers with system administrator permissions to interfere with other system administrators’ use of the management UI when the second administrator accesses the...

CVE-2024-37349

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Attackers with system administrator permissions can interfere with other system administrator’s use of the management UI when the victim administrator edits the same management...