CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

CVE-2024-52809

CVE-2024-52809 affects the Vue.js internationalization plugin vue-i18n . In affected versions, locale messages passed to createI18n or useI18n can cause the AST for locale messages to be generated in development mode, creating a potential Cross-site Scripting (XSS) risk. The issue is mitigated in...

PT-2024-35457 · Vue-I18N · Vue-I18N

Name of the Vulnerable Software and Affected Versions: vue-i18n versions prior to 9.14.2 vue-i18n versions prior to 10.0.5 Description: The issue concerns a Cross-site Scripting XSS attack possibility in vue-i18n, an internationalization plugin for Vue.js. This occurs when locale message ASTs are...

vue-i18n 跨站脚本漏洞

vue-i18n is an application from intlify open source. A cross-site scripting vulnerability exists in vue-i18n, which stems from the fact that vue-i18n can pass locale information to createI18n or useI18n. When generating a locale information AST in development mode, this could lead to a cross-site...

Malicious code in ssc-ui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30657b12f3aa80c9d47f78b2b86279c2077fb4840616cd1de07f80086d4d7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11105 Malicious code in ssc-ui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30657b12f3aa80c9d47f78b2b86279c2077fb4840616cd1de07f80086d4d7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-ui-vue-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 884882e2eb31bfc360a8f498a02cc4a1ff310a8f37182b3613b74c029a8f5234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11008 Malicious code in ssc-ui-vue-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 884882e2eb31bfc360a8f498a02cc4a1ff310a8f37182b3613b74c029a8f5234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on November 26, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-331-01 Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC ICSA-24-331-02...

Malicious code in ssc-org-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d921c8745841727abc5f7952027260365f833469b4d9c19256a95cbfd89737d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10865 Malicious code in ssc-org-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d921c8745841727abc5f7952027260365f833469b4d9c19256a95cbfd89737d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eds-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274d7cb9ce95b52c1349a7b6ffa0bd0629443ccc2709e4abddeaeed143443ee5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10485 Malicious code in eds-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274d7cb9ce95b52c1349a7b6ffa0bd0629443ccc2709e4abddeaeed143443ee5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IceCMS File Upload Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A file upload vulnerability exists in IceCMS 3.4.7 and earlier versions, which stems from the lack of validation of uploaded files in the uploadFile method of FileUtils.java. An attacker can use...

MAL-2024-9772 Malicious code in plugin-vue-jsx (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-vue-jsx (npm)

--- -= Per source details. Do not edit below this line.=-...

ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

The ReDoS can be exploited through the parseHTML function in the html-parser.ts file. This flaw allows attackers to slow down the application by providing specially crafted input that causes inefficient processing of regular expressions, leading to excessive resource consumption. To demonstrate...

0-1-project (0.0.1), 0.8.18-p11 (0.8.18-p12) +61263 more potentially affected by CVE-2024-9506 via vue (>=2.0.0, <=2.7.16)

vue NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.1.0, =1.1.0, =1.2.3 and more Source cves: CVE-2024-9506 Source advisory: OSV:GHSA-5J4C-8P2G-V4JX...