CVE-2024-46366

Webkul Krayin CRM version 1.3.0 is affected by a Client-side Template Injection (CSTI) vulnerability. A remote attacker can execute arbitrary client-side template code by injecting a malicious payload during the lead creation process . This execution can result in privilege escalation , granting ...

CVE-2024-46366

A Client-side Template Injection CSTI vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead creation process. This can lead to privilege escalation when the payload is executed, granting the...

CVE-2024-46366

A Client-side Template Injection CSTI vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead creation process. This can lead to privilege escalation when the payload is executed, granting the...

BIT-GITLAB-2024-45409 The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector

The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in = 12.2 and 1.13.0 = 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document by the IdP can thus forge a SAML...

CVE-2024-43188

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation...

CVE-2024-43188 IBM Business Automation Workflow improper input validation

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation...

CVE-2024-43188

CVE-2024-43188 affects IBM’s Business Automation Workflow Center and related components. The issue arises from improper client-side input validation, enabling a privileged user to perform unauthorized activities in affected releases. Affected versions include IBM Business Automation Workflow trad...

CVE-2024-43188 IBM Business Automation Workflow improper input validation

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation...

CVE-2024-43188: Client-Side Enforcement of Server-Side Security

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation...

@0xgg/echomd (>=1.0.0, <=1.0.4), @7nohe/vite-plugin-vue-marked (0.2.1) +1057 more potentially affected by CVE-2024-45801 via dompurify (>=2.0.0, <=2.5.0)

dompurify NPM version =2.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.13, =6.2.3, =6.4.3, =0.0.2-next.4, =0.3.0, =0.1.0, =0.1.0-a0, =1.0.0, =0.4.0, =0.0.18, =0.0.32 and more Source cves: CVE-2024-45801 Source advisory: OSV:GHSA-MMHX-HMJR-R674...

CVE-2024-27257

IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users...

CVE-2024-27257

IBM OpenPages is affected (versions 8.3 and 9.0). The issue is exposure of information about client-side source code via JavaScript source maps, enabling disclosure to unauthorized users. Root cause details indicate that source maps are not required for functionality and should be disabled or fix...

PT-2024-21776 · Ibm · Ibm Openpages

Name of the Vulnerable Software and Affected Versions: IBM OpenPages versions 8.3 through 9.0 Description: The issue potentially exposes information about client-side source code to unauthorized users through the use of JavaScript source maps. Recommendations: For IBM OpenPages versions 8.3 and...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3309 more potentially affected by CVE-2024-8373 via angular (>=1.0.8, <=1.8.3)

angular NPM version =1.0.8, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8373 Source advisory: OSV:GHSA-MQM9-C95H-X2P6...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +3266 more potentially affected by CVE-2024-8372 via angular (>=1.3.2, <=1.8.3)

angular NPM version =1.3.2, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2024-8372 Source advisory: OSV:GHSA-M9GF-397R-HWPG...

CVE-2024-39585

Dell SmartFabric OS10 Software, versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contains an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-side request forgery and Information disclosure...

CVE-2024-39585

Dell SmartFabric OS10 Software, versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contains an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-side request forgery and Information disclosure...

CVE-2024-39585

Dell SmartFabric OS10 exposes a Use of Hard-coded Password vulnerability affecting versions 10.5.5.4–10.5.5.10 and 10.5.6.x. The root cause is a hard-coded password that enables a low-privileged attacker with remote access to trigger client-side request forgery and information disclosure. Remedia...

CVE-2024-39585

Dell SmartFabric OS10 Software, versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contains an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-side request forgery and Information disclosure...

CVE-2024-39585: Use of Hard-coded Password

Dell SmartFabric OS10 Software, versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contains an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-side request forgery and Information disclosure...