1173 matches found
CVE-2024-6783 Vue client-side XSS via prototype pollution
A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClass or Object.prototype.staticStyle to execute arbitrary JavaScript code...
CVE-2024-6783
CVE-2024-6783 affects Vue and is described in multiple sources as a prototype-pollution–driven XSS vulnerability that could allow an attacker to modify Object.prototype properties (e.g., staticClass/staticStyle) and execute arbitrary JavaScript. The available connected documents confirm the issue...
The vulnerability of the gin-vue-admin administrative panel software lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL queries.
The vulnerability of the gin-vue-admin administrative panel-related software lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL queries...
PT-2024-37862 · Vue · Vue
Name of the Vulnerable Software and Affected Versions: Vue versions 2.0 through 3.0 Description: A vulnerability has been discovered that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClas...
Vue 安全漏洞
Vue is an HTML, CSS, and JS framework open-sourced by Vue. It is used to develop web applications with fine-grained reactivity. Vue suffers from a security vulnerability that stems from vulnerability to cross-site scripting attacks, where an attacker can change the prototype chain of certain...
CVE-2023-40223
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-40704
The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...
CVE-2023-40539
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-40159
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-40704 Philips Vue PACS Use of Default Credentials
The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...
CVE-2023-40704
Philips Vue PACS is affected by CVE-2023-40704 (Use of Default Credentials) as documented in multiple sources. The issue stems from weak password requirements during installation, allowing default credentials to be used and potentially enabling an attacker to access the PACS database, compromisin...
CVE-2023-40704 Philips Vue PACS Use of Default Credentials
The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...
CVE-2023-40539
The CVE entry CVE-2023-40539 is associated with Philips Vue PACS and is documented in connected sources as Weak Password Requirements (CWE-521). The Philips advisory lists this vulnerability among others affecting Vue PACS versions prior to 12.2.8.400 and highlights that weak password controls co...
CVE-2023-40223
CVE-2023-40223 affects Philips Vue PACS. The vulnerability is categorized as Improper Privilege Management (CWE-269) in Vue PACS components, with affected product/version details indicating versions prior to 12.2.8.410 are impacted. The technical overview notes an unintended sphere of control due...