1368 matches found
Malicious code in visualization-raphael-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6946 Malicious code in visualization-raphael-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-24896
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
Design/Logic Flaw
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
CVE-2022-24896 Tracker report renderer and chart widgets leak information in Tuleap
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
CVE-2022-24896
CVE-2022-24896 affects Tuleap versions prior to 13.7.99.239. The vulnerability stems from improper authorization checks when displaying content in the Tracker Report Renderer and Chart widgets, allowing an attacker to disclose the name of trackers and the fields used in reports. Impact is informa...
Exploit for Improper Authentication in Atlassian Jira_Data_Center
Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540）...
Helm Unsafe Link Following
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
GHSA-R78Q-QGX6-64PP Memory usage graphs accessible to anyone with Overall/Read
Jenkins includes a feature that shows a JVM memory usage chart for the Jenkins controller. Access to the chart in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier requires no permissions beyond the general Overall/Read, allowing users who are not administrators to view JVM memory usage data...
Memory usage graphs accessible to anyone with Overall/Read
Jenkins includes a feature that shows a JVM memory usage chart for the Jenkins controller. Access to the chart in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier requires no permissions beyond the general Overall/Read, allowing users who are not administrators to view JVM memory usage data...
CVE-2022-31487
Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chartcontent/master.php symbol SQL injection...
CVE-2022-31487
Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chartcontent/master.php symbol SQL injection...
CVE-2022-31487
CVE-2022-31487 affects Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1. The root cause is a SQL injection in Chart/TradingView/chart_content/master.php symbol parameter due to missing input filtering/escaping. Documented impact includes potential data exposure (confid...
多款Inout Blockchain产品SQL注入漏洞
Nesote Technologies Inout Blockchain AltExchanger and Nesote Technologies Inout Blockchain FiatExchanger are both products of Nesote Technologies India.Nesote Technologies Inout Blockchain AltExchanger is a premium and secure cryptocurrency exchange platform script. It helps you to start...
GHSA-5GH4-V2CH-PCX4 phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in 1 an anchor identifier to setup/index.php or 2 a chartTitle aka chart title value...
GHSA-XRXM-MVQM-R553 Helm Path Traversal
All versions of Helm between Helm =2.0.0 and 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The commands helm fetch --untar and helm lint some.tgz that can result when chart archive files are unpacked a file may be unpacked...
Write access to the catalog for any user when restricted-admin role is enabled in Rancher
Impact This vulnerability only affects customers using the restricted-admin role in Rancher. For this role to be active, Rancher must be bootstrapped with the environment variable CATTLERESTRICTEDDEFAULTADMIN=true or the configuration flag restrictedAdmin=true. A flaw was discovered in Rancher...
SQL Injection
apachesuperset is vulnerable to SQL injection. An attacker is able to inject malicious SQL via chart data requests...