429 matches found
Malicious code in @zitterorg/ab-fugiat-impedit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d432bd9ce4ff557027d8683e72756af43e8b5ee86165974fa36e7991bced1ecc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ab-panel (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6319 Malicious code in ab-panel (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-4129
Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...
CVE-2024-4129 Authentication bypass in Snow License Manager
Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...
CVE-2024-4129
The provided data confirms CVE-2024-4129: Snow Software AB Snow License Manager for Windows (versions 9.33.2–9.34.0) contains an Improper Authentication flaw that allows a network attacker to bypass authentication when Active Directory Authentication is enabled. Affected component/condition: Snow...
Malicious code in dependency-ab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fec8d7ec43c80d82430113c122d14e2ff81d81b32ded41933bbdf246305772b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-50377
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...
CVE-2023-50377
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...
CVE-2023-50377
CVE-2023-50377 is a Stored XSS in AB-WP Simple Counter (affecting versions from n/a through 1.0.2) due to improper neutralization of input during web page generation; no remediation details are provided in the initial document.
ab-depannage-reims.com Improper Access Control vulnerability OBB-3791318
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ab-estudio.com.ar Cross Site Scripting vulnerability OBB-3719350
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-37222
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
Cross site scripting
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
CVE-2023-37222 Farsight Tech Nordic AB ProVide
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...
CVE-2023-37222
CVE-2023-37222 affects Farsight Tech Nordic AB ProVide 14.5. The vulnerability is multiple Cross-Site Scripting (CWE-79) in the web interface that can be exploited by a user with administrator privileges, with user interaction required. CVSS details from NVD indicate a low/moderate overall impact...
Buffer overflow
A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level...
CVE-2023-34561
A vulnerability CVE-2023-34561 affects Geometry Dash v2.113 from RobTop Games AB. The issue is a buffer overflow in the level parsing code, enabling arbitrary code execution when a level is entered. The connected documents confirm the affected product/version and the underlying cause (buffer over...
ab-atelierdubois.fr Cross Site Scripting vulnerability OBB-3489556
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...