985 matches found
CVE-2017-20087
CVE-2017-20087 affects Alpine PhotoTile for Instagram Plugin 1.2.7.7. The issue is a basic cross-site scripting vulnerability in unknown functionality, potentially exploitable remotely. CVSSv3.1 base score 6.1 (NETWORK, LOW complexity, NONE privileges, UI=REQUIRED, scope changed; Confidentiality/...
CVE-2017-20087 Alpine PhotoTile for Instagram Plugin cross site scriting
A vulnerability, which was classified as problematic, has been found in Alpine PhotoTile for Instagram Plugin 1.2.7.7. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely...
WordPress Plugin Alpine PhotoTile for Instagram 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
Malicious code in alpine-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86d07e23fb437592173b457bff0c37d2d1cbe13b7440e5f24f46f20329621dea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-949 Malicious code in alpine-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86d07e23fb437592173b457bff0c37d2d1cbe13b7440e5f24f46f20329621dea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ALPINE-CVE-2022-2126
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-27774
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTPS redirects is used with authentication could leak credentials to other services that exist on different protocols ...
ALPINE-CVE-2022-27778
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when --no-clobber is used together with --remove-on-error...
ALPINE-CVE-2022-30785
A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
ALPINE-CVE-2022-1886
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-1796
Use After Free in GitHub repository vim/vim prior to 8.2.4979...
support.alpine-europe.com Cross Site Scripting vulnerability OBB-2613777
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-28391
An escape sequence injection attack was found in BusyBox on Alpine. For this issue to occur, a remote host's virtual terminal must contain an escape sequence, and the victim must then execute netstat. This flaw allows an attacker can inject arbitrary code, leading to a loss of integrity...
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - zabbix-agent2 package for Alpine Linux (CVE-2022-22704)
Summary Security Vulnerabilities affect IBM Cloud Private - zabbix-agent2 package for Alpine Linux Vulnerability Details CVEID: CVE-2022-22704 DESCRIPTION: zabbix-agent2 package for Alpine Linux could allow a remote authenticated attacker to gain elevated privileges on the system, caused by a...
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - xrdp package for Alpine Linux (CVE-2021-36158)
Summary Security Vulnerabilities affect IBM Cloud Private - xrdp package for Alpine Linux Vulnerability Details CVEID: CVE-2021-36158 DESCRIPTION: xrdp package for Alpine Linux is vulnerable to a man-in-the-middle attack, caused by improper generation of RSA certificates and private keys in the R...
ALPINE-CVE-2022-27404
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...
Slackware: Security Advisory (SSA:2021-264-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ALPINE-CVE-2022-27449
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemfunc.cc:148...
ALPINE-CVE-2022-28805
singlevar in lparser.c in Lua from including 5.4.0 up to excluding 5.4.4 lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code...