319 matches found
MAL-2025-15809 Malicious code in blaze-dotenv-parse-variables-spawn-foundation (npm)
The package blaze-dotenv-parse-variables-spawn-foundation was found to contain malicious code...
MAL-2025-18333 Malicious code in despina-hydra-avior-blaze (npm)
The package despina-hydra-avior-blaze was found to contain malicious code...
MAL-2025-39876 Malicious code in xml-juno-leda-blaze (npm)
The package xml-juno-leda-blaze was found to contain malicious code...
Malicious code in postcss-blaze-hermes-wolf (npm)
The package postcss-blaze-hermes-wolf was found to contain malicious code...
MAL-2025-17601 Malicious code in corvus-build-blaze-mongodb (npm)
The package corvus-build-blaze-mongodb was found to contain malicious code...
MAL-2025-39695 Malicious code in xenos-blaze-mui-jsonp (npm)
The package xenos-blaze-mui-jsonp was found to contain malicious code...
MAL-2025-15811 Malicious code in blaze-quantumfoam-nconf-global (npm)
The package blaze-quantumfoam-nconf-global was found to contain malicious code...
MAL-2025-15812 Malicious code in blaze-release-it-morgan-biosignature (npm)
The package blaze-release-it-morgan-biosignature was found to contain malicious code...
MAL-2025-14976 Malicious code in astrochemistry-element-ui-darkenergy-blaze (npm)
The package astrochemistry-element-ui-darkenergy-blaze was found to contain malicious code...
MAL-2025-38214 Malicious code in venus-blaze-geochronology-configstore (npm)
The package venus-blaze-geochronology-configstore was found to contain malicious code...
com.blazebit:blaze-notify-channel-smtp (=1.0.0-Alpha6), com.blazebit:blaze-notify-server (=1.0.0-Alpha6) +21 more potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (>=1.0.0-M1 <=2.0.3)
org.eclipse.angus:smtp MAVEN version =1.0.0-M1, =1.0.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.7 and more Source cves: CVE-2025-7962 Source advisory: OSV:GHSA-9342-92GG-6V29...
com.blazebit:blaze-notify-channel-smtp (=1.0.0-Alpha6), com.blazebit:blaze-notify-server (=1.0.0-Alpha6) +21 more potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (>=2.0.0 <=2.0.3)
org.eclipse.angus:smtp MAVEN version =2.0.0, =2.0.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.7 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-ORGECLIPSEANGUS-11520768...
CVE-2021-21293
blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. All servers running blaze-core before version 0.14.15 are affected by a vulnerability in which unbounded connection acceptance leads to file handle exhaustion. Blaze, accepts connections unconditionally on a...
CVE-2024-54240
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blazeonline Blaze Online eParcel for WooCommerce blaze-online-eparcel-for-woocommerce allows Reflected XSS.This issue affects Blaze Online eParcel for WooCommerce: from n/a through = 1.3.3...
CVE-2024-54240
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blazeonline Blaze Online eParcel for WooCommerce blaze-online-eparcel-for-woocommerce allows Reflected XSS.This issue affects Blaze Online eParcel for WooCommerce: from n/a through = 1.3.3...
CVE-2024-54240
CVE-2024-54240 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Blaze Online eParcel for WooCommerce, affecting versions 1.3.3 and earlier. It arises from improper input neutralization during page generation. Impact, as stated in sources, could allow injection of sc...
PT-2024-36119 · Woocommerce · Blaze Online Eparcel For Woocommerce
Name of the Vulnerable Software and Affected Versions: Blaze Online eParcel for WooCommerce versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...
WordPress plugin Blaze Online eParcel for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress Blaze Online eParcel for WooCommerce plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Blaze Online eParcel for WooCommerce versions = 1.3.3...
WordPress BLAZE Retail Widget plugin <= 2.5.2 - Malicious Polyfill.io Embed vulnerability
Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin BLAZE Retail Widget versions = 2.5.2...