860 matches found
Malicious code in @zalastax/nolb-node-red-contrib-4 (npm)
The package @zalastax/nolb-node-red-contrib-4 was found to contain malicious code...
Malicious code in @zalastax/nolb-node-red-contrib-b (npm)
The package @zalastax/nolb-node-red-contrib-b was found to contain malicious code...
Malicious code in @zalastax/nolb-node-red-contrib-i (npm)
The package @zalastax/nolb-node-red-contrib-i was found to contain malicious code...
MAL-2025-31914 Malicious code in red-contrib-enable-gps (npm)
The package red-contrib-enable-gps was found to contain malicious code...
Malicious code in node-red-contrib-xmlc14n (npm)
The package node-red-contrib-xmlc14n was found to contain malicious code...
MAL-2025-27650 Malicious code in node-red-contrib-xmlc14n (npm)
The package node-red-contrib-xmlc14n was found to contain malicious code...
XWiki Contrib Mocca Calendar Application 跨站脚本漏洞
XWiki Contrib Mocca Calendar Application is an open source XWiki plugin for XWiki Contrib. A cross-site scripting vulnerability exists in XWiki Contrib Mocca Calendar Application versions prior to 2.15, which stems from cross-site scripting in the calendar import header...
XWiki Contrib Mocca Calendar Application 跨站脚本漏洞
XWiki Contrib Mocca Calendar Application is an open source XWiki plugin for XWiki Contrib. A cross-site scripting vulnerability exists in XWiki Contrib Mocca Calendar Application versions prior to 2.15, which stems from cross-site scripting in the title of the View Events page...
@kumologica/kumologica-contrib-amazonbedrock (0.0.1-beta), @kumologica/sdk (>=3.6.0-alpha10, <=4.0.1) +2 more potentially affected by CVE-2024-46993 via electron (>=30.0.0, <=30.0.2)
electron NPM version =30.0.0, =3.6.0-alpha10, =2.0.131, =0.1.1, =0.1.3 Source cves: CVE-2024-46993 Source advisory: OSV:GHSA-6R2X-8PQ8-9489...
CVE-2025-6675 Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.8.0, from 5.2.0 before 5.2.1, from 0.0.0 before 5.0., from 0.0.0 before 5.1...
CVE-2021-25864
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file...
CVE-2025-47701 Restrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-047
Cross-Site Request Forgery CSRF vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0...
CVE-2025-46558
XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...
CVE-2025-46558
XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...
CVE-2025-46558 org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content
XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...
CVE-2025-46558 org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content
XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...
PT-2025-18319 · Xwiki · Xwiki Contrib'S Syntax Markdown
Name of the Vulnerable Software and Affected Versions: XWiki Contrib's Syntax Markdown versions 8.2 through 8.8 Description: The issue allows any user to embed Javascript code using Markdown syntax, which can be executed on the browser of other users visiting the document or comment containing it...
CVE-2025-3739
CVE-2025-3739 : A vulnerability in Drupal 8 Google Optimize Hide Page affects the Drupal 8 Google Optimize Hide Page module. The CVSSv3.1 metrics indicate a network attack vector, high attack complexity, and that an attacker requires high privileges with no user interaction to achieve a Confident...
The vulnerability of the contrib/japanese/gdevnpdl.c file, which is part of the NPDL Device software suite for processing, transforming, and generating Ghostscript documents, allows a perpetrator to execute arbitrary code.
The vulnerability of the contrib/japanese/gdevnpdl.c file, which is part of the NPDL Device software suite for processing, transforming, and generating Ghostscript documents, stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an...