MAL-2022-2755 Malicious code in enviso-web-components-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d75a7c878177290aa6c8c20615f8d9c791e5461f2f344511808c3ccc48e63da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gopro-web-javascript-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd5c887f1ae7f927a94580db5eb195ca0a078262261f58af907566bcda2568e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-37197

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS is vulnerable to SQL injections...

Cross site request forgery (csrf)

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS uses a flawed implementation of...

CVE-2021-37198

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS uses a flawed implementation of...

CVE-2021-37196

Siemens COMOS Web component contains a path traversal vulnerability (CVE-2021-37196) affecting COMOS Web in V10.2 (all versions when web components are used), V10.3 (before 10.3.3.3; and all versions ≥ 10.3.3.3 if web components are used), and V10.4 (before 10.4.1 if web components are used). The...

CVE-2021-41086

jsuites is an open source collection of common required javascript web components. In affected versions users are subject to cross site scripting XSS attacks via clipboard content. jsuites is vulnerable to DOM based XSS if the user can be tricked into copying anything from a malicious and pasting...

CVE-2021-41086

jsuites is an open source collection of common required javascript web components. In affected versions users are subject to cross site scripting XSS attacks via clipboard content. jsuites is vulnerable to DOM based XSS if the user can be tricked into copying anything from a malicious and pasting...

CVE-2021-41086

CVE-2021-41086 affects the jsuites project. The vulnerability is a DOM-based XSS triggered when clipboard content is pasted into an HTML editor, because part of the clipboard content is written directly to innerHTML. The attacker must entice the user to copy arbitrary content and paste it. Impact...

Jsuites 跨站脚本漏洞

Jsuites is a set of lightweight, commonly used javascript web components. A cross-site scripting vulnerability exists in jsuites, which stems from the lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...

Description of the update package for Communications Server 2007 R2, Web Components: March, 2011

Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Web Components that is dated March 2011.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Components that is dated...

CVE-2019-5314

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

Crlf injection

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...

Description of the update package for Communications Server 2007 R2, Web Components: September 2010

Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Web Components that is dated September 2010.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Components that is dated...

MS09-043: Vulnerabilities in Microsoft Office Web Components could allow remote code execution

Resolves vulnerabilities in Office Web Components that could allow remote code execution if a user viewed a specially crafted Web page.INTRODUCTIONMicrosoft has released security bulletin MS09-043. To view the complete security bulletin, visit one of the following Microsoft Web sites:Home...

MS09-043: Description of the security update for Office 2003 Web Components for the 2007 Office system: August 11, 2009

MS09-043: Description of the security update for Office 2003 Web Components for the 2007 Office system: August 11, 2009 INTRODUCTION Microsoft has released security bulletin MS09-043. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

MS12-060: Description of the security update for Office 2003 and Office 2003 Web Components: August 14, 2012

MS12-060: Description of the security update for Office 2003 and Office 2003 Web Components: August 14, 2012 View products that this article applies to.Microsoft has released security bulletin MS12-060. You can view the complete security bulletin by going to one of the following Microsoft website...

Microsoft Lync Server Multiple Vulnerabilities (3089952)

This host is missing an important security update according to Microsoft Bulletin MS15-104. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync XSS Information Disclosure Vulnerability."...

CVE-2014-4070

CVE-2014-4070 is an XSS vulnerability affecting Microsoft Lync Server 2013 (Web Components Server). The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, stemming from insufficient input sanitization. Multiple connected sources corroborate this, listing Lync ...