CVE-2022-4637 ep3-bs cross site scripting

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is...

CVE-2022-4637: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is...

PT-2022-27842 · Ep3-Bs · Ep3-Bs

Name of the Vulnerable Software and Affected Versions: ep3-bs versions up to 1.7.x ep3-bs version 1.8.0 Description: A vulnerability has been found in ep3-bs, affecting an unknown part, which leads to cross site scripting. The manipulation can be initiated remotely. Recommendations: For ep3-bs...

CVE-2022-4637 ep3-bs cross site scripting

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is...

CVE-2022-4637

CVE-2022-4637 affects ep3-bs up to version 1.7.x, where a cross-site scripting flaw can be triggered remotely through an unspecified component. The issue is mitigated by upgrading to ep3-bs 1.8.0; the patch is referenced by the identifier ef49e709c8adecc3a83cdc6164a67162991d2213. Connected source...

CVE-2022-4637 ep3-bs cross site scripting

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is...

CLSA-2022-1657813374 Fix CVE(s): CVE-2022-2182, CVE-2022-2183, CVE-2022-2210, CVE-2022-2207

SECURITY UPDATE: Heap-based buffer overflow in function utfptr2char - debian/patches/CVE-2022-2182.patch: When on line zero check the column is valid for line one in doonecmd function - CVE-2022-2182 SECURITY UPDATE: Out-of-bounds read in function getlispindent - debian/patches/CVE-2022-2183.patc...

PT-2022-3436

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the ins bs function located in edit.c. This overflow occurs in dynamic memory and can be exploited by a remote...

bs-photo.de Cross Site Scripting vulnerability OBB-2659419

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-3723 Malicious code in huobi-bs-fe-scaffold (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac5154dea0a0982316b2a0d54d6df43f25cd76daacac6d47c2b7a3bee9e0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs-sidebar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205dccdeb1edb92580ab0690e8ca24d862a431a55960aad0a69f0bc7d19ee9d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1701 Malicious code in bs-label (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 105773063a191660ea8a57cdb0567ef48908ebd31b8659bdd8760f88d614dae4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs-label (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 105773063a191660ea8a57cdb0567ef48908ebd31b8659bdd8760f88d614dae4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1702 Malicious code in bs-sidebar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205dccdeb1edb92580ab0690e8ca24d862a431a55960aad0a69f0bc7d19ee9d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs-dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0008236b6e7e91cceb276f75cacff76e11d53cdf34f07904ad2faaca38f143a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1700 Malicious code in bs-dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0008236b6e7e91cceb276f75cacff76e11d53cdf34f07904ad2faaca38f143a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2021-27766

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: ih264d fill bs1 16x16mb pslice, ih264d compute bs non...

Booking Core Cross-Site Scripting Vulnerability

Booking Core is an application. A Laravel-based booking system designed for travel websites, malls, travel agents, tour operators, B&Bs, villa rentals, resort rentals, Make Travel websites.Booking Core suffers from a cross-site scripting vulnerability, which stems from a cross-site scripting XSS...

Booking Core has an unspecified vulnerability

Booking Core is an application. A Laravel-based booking system designed for travel websites, malls, travel agents, tour operators, B&Bs, villa rentals, resort rentals, Make Travel websites.Booking Core has a security vulnerability that stems from the subscription functionality in Ultimate Booking...

@buckeye/bs-layered-config (>=1.0.0, <=1.2.0), reason-nconf (>=1.2.0, <=1.3.2) potentially affected by CVE-2021-25946 via nconf-toml (0.0.2)

nconf-toml NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on nconf-toml and may be impacted: - @buckeye/bs-layered-config =1.0.0, =1.2.0, =1.3.2 Source cves: CVE-2021-25946 Source advisory: OSV:GHSA-HX7J-43W2-7RJ7...