1467 matches found
CVE-2024-52809
CVE-2024-52809 affects the Vue.js internationalization plugin vue-i18n . In affected versions, locale messages passed to createI18n or useI18n can cause the AST for locale messages to be generated in development mode, creating a potential Cross-site Scripting (XSS) risk. The issue is mitigated in...
PT-2024-35457 · Vue-I18N · Vue-I18N
Name of the Vulnerable Software and Affected Versions: vue-i18n versions prior to 9.14.2 vue-i18n versions prior to 10.0.5 Description: The issue concerns a Cross-site Scripting XSS attack possibility in vue-i18n, an internationalization plugin for Vue.js. This occurs when locale message ASTs are...
CVE-2024-52809: Improper Neutralization of Input During Web Page Generation
vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...
vue-i18n 跨站脚本漏洞
vue-i18n is an application from intlify open source. A cross-site scripting vulnerability exists in vue-i18n, which stems from the fact that vue-i18n can pass locale information to createI18n or useI18n. When generating a locale information AST in development mode, this could lead to a cross-site...
Malicious code in ssc-ui-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30657b12f3aa80c9d47f78b2b86279c2077fb4840616cd1de07f80086d4d7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in ssc-ui-vue
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-11105 Malicious code in ssc-ui-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30657b12f3aa80c9d47f78b2b86279c2077fb4840616cd1de07f80086d4d7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in ssc-org-vue
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in ssc-ui-vue-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 884882e2eb31bfc360a8f498a02cc4a1ff310a8f37182b3613b74c029a8f5234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in ssc-ui-vue-pro
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-11008 Malicious code in ssc-ui-vue-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 884882e2eb31bfc360a8f498a02cc4a1ff310a8f37182b3613b74c029a8f5234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CISA Releases Six Industrial Control Systems Advisories
CISA released six Industrial Control Systems ICS advisories on November 26, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-331-01 Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC ICSA-24-331-02...
Malware in eds-vue
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in ssc-org-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d921c8745841727abc5f7952027260365f833469b4d9c19256a95cbfd89737d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10865 Malicious code in ssc-org-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d921c8745841727abc5f7952027260365f833469b4d9c19256a95cbfd89737d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10485 Malicious code in eds-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274d7cb9ce95b52c1349a7b6ffa0bd0629443ccc2709e4abddeaeed143443ee5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eds-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274d7cb9ce95b52c1349a7b6ffa0bd0629443ccc2709e4abddeaeed143443ee5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
IceCMS File Upload Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A file upload vulnerability exists in IceCMS 3.4.7 and earlier versions, which stems from the lack of validation of uploaded files in the uploadFile method of FileUtils.java. An attacker can use...