CVE-2022-42206

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

Cross site scripting

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

CVE-2022-42206: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

Hospital Management System Cross-site Scripting Vulnerabilities

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v4.0 contains a cross-site scripting vulnerability that originates in the view-patient .php and...

CVE-2022-42206

PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting XSS via doctor/view-patient.php, admin/view-patient.php, and view-medhistory.php...

CVE-2022-36966

Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference IDOR vulnerability in SolarWinds Platform 2022.3 and previous...

GHSA-WHPX-Q3RQ-W8JC Hardening of TypedArrays with non-canonical numeric property names in SES

Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...

Hardening of TypedArrays with non-canonical numeric property names in SES

Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...

SolarWinds Platform security vulnerabilities

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform version 2022.3 and prior versions that stems from an insecure direct object reference IDOR. An attacker with node...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2022-43405 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2022-43406 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

com.synopsys.jenkinsci:ownership (>=0.9.0-beta-1, <=0.13.0), org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (1.0) +9 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.synopsys.jenkinsci:ownership =0.9.0-beta-1, =1.0, =1.2.0, =1.2.7 -...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=2.32, <=2.34), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.32, <=2.34) +2 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (2660.vb_c0412dc4e6d)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2660.vbc0412dc4e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-a...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (1.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (1.0) +2 more potentially affected by CVE-2022-43405 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: -...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.8-beta-1, <=2.11) +2 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (2.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.splunk.splunkins:splunk-devops-extend =1.0, =1.8-beta-1, =1.8-beta-1,...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=2.32, <=2.34), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.32, <=2.34) +2 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (2660.vb_c0412dc4e6d)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2660.vbc0412dc4e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-a...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +4 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:parent-pom =1.0-alpha-...

org.jenkins-ci.plugins.workflow:workflow-aggregator (2.2) potentially affected by CVE-2022-43408 via org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (1.4)

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view and may be impacted: -...

com.testinium.jenkins:testinium (1.0), net.praqma:memory-map (>=2.2.0, <=2.2.1) +11 more potentially affected by CVE-2022-43408 via org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.0, <=2.10)

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view MAVEN version =2.0, =2.2.0, =2.3, =2.0.5, =1.0.0, =1.0.0, =1.5.0, =3.0.0-beta.2, =1.0.0, =1.0.3, =1.1.1 Source cves: CVE-2022-43408 Source advisory: OSV:GHSA-G975-F26H-93G8...

com.testinium.jenkins:testinium (1.0), net.praqma:memory-map (>=2.2.0, <=2.2.1) +11 more potentially affected by CVE-2022-43408 via org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.0, <=2.10)

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view MAVEN version =2.0, =2.2.0, =2.3, =2.0.5, =1.0.0, =1.0.0, =1.5.0, =3.0.0-beta.2, =1.0.0, =1.0.3, =1.1.1 Source cves: CVE-2022-43408 Source advisory: GHSA-G975-F26H-93G8...