370 matches found
WordPress plugin WP Category Dropdown 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-59475
Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu e.g.,...
CVE-2025-59475
Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu e.g.,...
PT-2025-38152
Name of the Vulnerable Software and Affected Versions Jenkins versions 2.527 and earlier Jenkins LTS versions 2.516.2 and earlier Description Jenkins does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obta...
Linux Distros Unpatched Vulnerability : CVE-2020-27663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any itemTyp...
Linux Distros Unpatched Vulnerability : CVE-2017-11329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entityrestrict parameter that is not a list of integers. CVE-2017-11329...
Linux Distros Unpatched Vulnerability : CVE-2014-9258
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the...
Malicious code in paper-dropdown-menu (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-45504 Malicious code in paper-dropdown-menu (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in paper-dropdown-input (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f60c41c2f87fe82386507e3f611946e4d7b12f970168662d0532b831a12d254 The OpenSSF Package Analysis project identified 'paper-dropdown-input...
MAL-2025-42051 Malicious code in paper-dropdown-input (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f60c41c2f87fe82386507e3f611946e4d7b12f970168662d0532b831a12d254 The OpenSSF Package Analysis project identified 'paper-dropdown-input...
MAL-2025-9302 Malicious code in @sellerly-kit/dropdown-menu (npm)
The package @sellerly-kit/dropdown-menu was found to contain malicious code...
MAL-2025-31781 Malicious code in react-dropdownhunter (npm)
The package react-dropdownhunter was found to contain malicious code...
Malicious code in @sellerly-kit/dropdown-bottom-sheet (npm)
The package @sellerly-kit/dropdown-bottom-sheet was found to contain malicious code...
MAL-2025-9301 Malicious code in @sellerly-kit/dropdown-bottom-sheet (npm)
The package @sellerly-kit/dropdown-bottom-sheet was found to contain malicious code...
Malicious code in ch-react-dropdown (npm)
The package ch-react-dropdown was found to contain malicious code...
Malicious code in react-dropdownhunter (npm)
The package react-dropdownhunter was found to contain malicious code...
Malicious code in @sellerly-kit/dropdown (npm)
The package @sellerly-kit/dropdown was found to contain malicious code...