17087 matches found
CVE-2022-34186
The CVE-2022-34186 entry concerns the Jenkins Dynamic Extended Choice Parameter Plugin (version 1.0.1 and earlier), where the plugin does not escape the name and description of Moded Extended Choice parameters on parameter views. This creates a stored XSS vulnerability exploitable by attackers wi...
CVE-2022-34186
Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
dynamic-chiropractic.com Cross Site Scripting vulnerability OBB-2663843
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Jenkins Plugin Dynamic Extended Choice Parameter 跨站脚本漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins Dynamic Extended Choice Parameter Plugin version 1.0.1 and prior...
PT-2022-22054 · Jenkins · Jenkins Dynamic Extended Choice Parameter Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Dynamic Extended Choice Parameter Plugin versions 1.0.1 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the plugin does not escape the name and description of Moded Extended...
The vulnerability of the Microsoft PowerPoint presentation preparation program arises from overflowing buffers in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft PowerPoint presentation preparation program arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...
MAL-2022-2131 Malicious code in commonweb-dynamic-routing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71b93dd72fab608c353b277edc3606970d23565abb0aa6f79b894e88f1da1d1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2637 Malicious code in dynamic-virtualized-list (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ad5dca37ce4e1a6a3af411200d84a6cb4666b6b8a7541346fe19de8b16c4fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dynamic-virtualized-list (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ad5dca37ce4e1a6a3af411200d84a6cb4666b6b8a7541346fe19de8b16c4fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5093 Malicious code in open-xchange-dynamic-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a96e50ca6cc7c7578b074f0dc86954116910ef89cda8ea572949a050037b59e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in open-xchange-dynamic-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a96e50ca6cc7c7578b074f0dc86954116910ef89cda8ea572949a050037b59e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2636 Malicious code in dynamic-load-sticky-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cae02f392cd1bcfcc0c014ee7fed7a90f615a4fb38ab23b0e73d06f33c72d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dynamic-load-sticky-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cae02f392cd1bcfcc0c014ee7fed7a90f615a4fb38ab23b0e73d06f33c72d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-8MV5-7X95-7WCF `mopa` is technically unsound
The mopa crate redefines the deprecated TraitObject struct from core::raw like so: rust reprC deriveCopy, Clone dochidden pub struct TraitObject pub data: mut , pub vtable: mut , This is done to then transmute a reference to a trait object &dyn Trait for any trait Trait into this struct and...
CVE-2022-22788
The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before...
New Hertzbleed Side Channel Attack Affects All Modern AMD and Intel CPUs
A newly discovered security vulnerability in modern Intel and AMD processors could let remote attackers steal encryption keys via a power side channel attack. Dubbed Hertzbleed by a group of researchers from the University of Texas, the University of Illinois Urbana-Champaign, and the University ...
Security update for caddy (moderate)
openSUSE Security Update: Security update for caddy Announcement ID: openSUSE-SU-2022:10007-1 Rating: moderate References: 1200279 Cross-References: CVE-2022-297182 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This update f...
2022-06 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5014699)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
CVE-2022-22788
The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before...