10590 matches found
Joomla! Security Vulnerabilities
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! that stems from improper input handling and could lead to a cross-site scripting XSS vulnerability...
CVE-2024-39689 vulnerabilities
Vulnerabilities for packages: dask-gateway, py3-cassandra-medusa, reflex, barman, py3-pipenv, patroni, nvidia-nsight-compute-13.2, request-1276, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, jwt-tool, checkov, airflow, kubeflow-katib, superset, mlflow, confluent-docker-utils,...
CVE-2024-23998
goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...
CVE-2024-23998: Improper Neutralization of Input During Web Page Generation
goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...
USN-6877-1 libreoffice vulnerability
It was discovered that LibreOffice incorrectly performed TLS certificate verification when the LibreOfficeKit library is being used by third-party components. A remote attacker could possibly use this issue to obtain sensitive information...
USN-6871-1: Linux kernel (HWE) vulnerabilities
It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. A malicious person can exploit the vulnerabilities to grant themselves elevated privileges on the device to execute arbitrary code, possibly with system privileges and gain access to sensitive data. Successful abuse requires the malicious party to tric...
@amoy/animate (>=0.1.0, <=0.1.8), @amoy/query (>=0.1.1, <=0.4.3) +4 more potentially affected by CVE-2024-38994 via @amoy/common (1.0.10)
@amoy/common NPM version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @amoy/common and may be impacted: - @amoy/animate =0.1.0, =0.1.1, =1.0.0, =0.1.0, =1.0.1, =1.0.42 - react-webgl.js 0.0.1 Source cves: CVE-2024-38994 Source advisory:...
Cross-site Scripting (XSS)
TYPO3 is vulnerable to Cross-site Scripting. The vulnerability is due to failing to properly encode user input in some backend components...
WordPress PDF Embedder Plugin <= 4.7.1 is vulnerable to Cross Site Scripting (XSS)
Software PDF Embedder Type Plugin Vulnerable versions = 4.7.1 Fixed in 4.8.0 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7794a505b744 Credits m3ez Required...
Malicious code in ui-components-web (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3256 Malicious code in ui-components-web (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in u-workflow.components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3151 Malicious code in tpg-tc-ui-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tpg-tc-ui-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3060 Malicious code in styled-beautify-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in styled-beautify-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2620 Malicious code in linkinbio-web-components (npm)
--- -= Per source details. Do not edit below this line.=-...