1128 matches found
WordPress plugin WP Docs 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin WP Docs versions 2.2.7...
Security Bulletin: IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps is vulnerable to information disclosure and weaker security (CVE-2022-43901, CVE-2022-43900)
Summary IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps could disclose sensitive information and contain weaker than expected security. This has been addressed. Vulnerability Details CVEID:CVE-2022-43901 DESCRIPTION: IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps could...
UBUNTU-CVE-2025-2720
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: According to the code maintainer the call of the POC is invalid because the buffer pointed to by "data...
airunner (>=3.0.0 <=3.1.7), llama-index-packs-arize-phoenix-query-engine (>=0.0.2 <=0.1.4) +2 more potentially affected by CVE-2024-12910 via llama-index-readers-web (>=0.0.1 <=0.2.4)
llama-index-readers-web PYPI version =0.0.1, =3.0.0, =0.0.2, =0.1.0, =0.1.0, =0.2.8 Source cves: CVE-2024-12910 Source advisory: SNYK:PYTHON-LLAMAINDEXREADERSWEB-9510943...
DRUPAL-CONTRIB-2025-025
This module can be used to render Open API Documentation using the RapiDoc library. The module provides a custom formatter for link fields. Drupal core does not sufficiently sanitize link element attributes, which can lead to a Cross Site Scripting vulnerability XSS. A separate fix for Drupal cor...
Malicious code in antlir2-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 580dffd4893c96ae46965b4244381b9fcc03d13cdd1cf32b89bb7a0eee2521e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2488 Malicious code in antlir2-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 580dffd4893c96ae46965b4244381b9fcc03d13cdd1cf32b89bb7a0eee2521e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in whatsapp-sdk-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 788206c160622c7c87f5e0b19b4be9383f89a8918fa3aace86ec99350a06daa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2440 Malicious code in whatsapp-sdk-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 788206c160622c7c87f5e0b19b4be9383f89a8918fa3aace86ec99350a06daa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in topper-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6c2ac1f1c30ccadf055f2c40c14731fdfad72bb0d22ff86c704b36226819362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2423 Malicious code in topper-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6c2ac1f1c30ccadf055f2c40c14731fdfad72bb0d22ff86c704b36226819362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in apache-superset-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1661502573ce2ee16beaabec0853d68140a4e4aa5372720f3f20359cacfaed78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2359 Malicious code in aiven-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7ef5fbee116dc7c6a033971fa455298110b289026b14470eb6120ae7aa06467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aiven-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7ef5fbee116dc7c6a033971fa455298110b289026b14470eb6120ae7aa06467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cis-photoshop-api-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a77d4b1246934467151f8c2fc186f13f5899f16b36f1f32caa547a0908a27edf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Moderate: Red Hat Security Advisory: Red Hat Developer Hub 1.4.2 release.
Red Hat Developer Hub 1.4.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: nri-mysql, sonobuoy, prometheus-adapter, oras, memcached-exporter, nri-redis, nri-cassandra, kubernetes-dns-node-cache, temporal-ui-server, chartmuseum, cluster-proportional-autoscaler, nfs-subdir-external-provisioner, kind, yam, k3d, spark-operator,...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: crossplane-provider-keycloak, velero-plugin-for-aws, cert-manager-cmctl, influx, controller-gen, flux-notification-controller, kapp, argo-events, boring-registry, nuclei, go-md2man, gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-gcp, go-licenses,...
