@advanced-elements/table (>=2.0.6, <=2.0.10), @ahcui/vue3-multiplex (1.0.0-rc2) +20 more potentially affected by CVE-2022-27103 via element-plus (>=2.0.0, <=2.0.5)

element-plus NPM version =2.0.0, =2.0.6, =1.0.0-beta.1, =0.1.2, =0.1.7, =1.0.1, =1.1.8, =2.7.24, =0.5.14, =1.0.2, =0.1.61, =1.1.2, =1.0.0, =1.0.1 and more Source cves: CVE-2022-27103 Source advisory: OSV:GHSA-RJVG-8V36-XV9R...

@advanced-elements/table (>=2.0.6, <=2.0.10), @ahcui/vue3-multiplex (1.0.0-rc2) +20 more potentially affected by CVE-2022-27103 via element-plus (>=2.0.0, <=2.0.5)

element-plus NPM version =2.0.0, =2.0.6, =1.0.0-beta.1, =0.1.2, =0.1.7, =1.0.1, =1.1.8, =2.7.24, =0.5.14, =1.0.2, =0.1.61, =1.1.2, =1.0.0, =1.0.1 and more Source cves: CVE-2022-27103 Source advisory: GHSA-RJVG-8V36-XV9R...

Vulnerabilities fixed in FreeRADIUS

Two vulnerabilities have been fixed in FreeRADIUS. The vulnerabilities allow a malicious party to cause a denial-of-service or to obtain sensitive data obtain. To cause the denial-of-service, the malicious party must possess a system in the FreeRADIUS "circle of trust." The developers of FreeRADI...

CVE-2022-27103

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

CVE-2022-27103

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

Cross site scripting

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

CVE-2022-27103

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

CVE-2022-27103

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

CVE-2022-27103

CVE-2022-27103 affects element-plus 2.0.5, with a Cross Site Scripting (XSS) flaw exposed through el-table-column. The root cause described in the included records is inadequate sanitization/filtering of el-table-column content, allowing injected script execution. Multiple sources (CNNVD citing l...

@17mkh/ui (0.0.2), @advanced-elements/table (>=2.0.1, <=2.0.10) +653 more potentially affected by CVE-2022-27103 via element-plus (>=1.0.1-beta.0, <=2.0.5)

element-plus NPM version =1.0.1-beta.0, =2.0.1, =0.0.1, =0.0.1, =0.0.1, =0.6.6, =0.3.3, =0.0.1, =0.0.1, =0.1.15, =0.0.1, =0.0.1, =3.5.0 and more Source cves: CVE-2022-27103 Source advisory: MEND:CVE-2022-27103...

PT-2025-8359

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where a stale list iterator could be dereferenced after a loop, potentially leading to out-of-bounds or undefined values being loaded. Thi...

Element Plus Cross-Site Script Vulnerability

Element Plus is an open source Vue.js 3 UI library from the China Element Plus organization. A cross-site scripting vulnerability exists in Element Plus version 2.0.5, which stems from a lack of filtering and escaping of el-table-column in the application...

PT-2022-18221

Name of the Vulnerable Software and Affected Versions element-plus versions prior to 2.0.5 Description The issue concerns Cross Site Scripting XSS via the el-table-column component. Specifically, when the show-tooltips-overflow attribute of el-table-column is set to true, a mouseover action can...

CVE-2022-27103: Improper Neutralization of Input During Web Page Generation

element-plus 2.0.5 is vulnerable to Cross Site Scripting XSS via el-table-column...

GHSA-48WW-8H7G-4HWQ TYPO3 is vulnerable to Spam Abuse in the native form content element

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element. An attacker could abuse the form to send mails to arbitrary email addresses...

PHP php_wddx_push_element DoS

The vulnerability of the phpwddxpushelement function ext/wddx/wddx.c in the PHP programming language is caused by buffer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure due to an incorrect logical element in an XML document...

Cross-site Scripting in fullpage.js

using fullpage.js you can create a anchor tag . But when put href in anchor then it does not sanitize the url which allow for a break in the context of anchor element and can add our new element...

GHSA-H3CQ-J957-VHXG Cross-site Scripting in fullpage.js

using fullpage.js you can create a anchor tag . But when put href in anchor then it does not sanitize the url which allow for a break in the context of anchor element and can add our new element...

Siemens Simcenter Femap Out-of-Bounds Read Vulnerability (CNVD-2022-28490)

An out-of-bounds read vulnerability exists in Siemens Simcenter Femap, an advanced simulation application for creating, editing, and inspecting finite element models of complex products or systems, which can be exploited by attackers to execute code in the context of the current process...

Siemens Simcenter Femap has an out-of-bounds write vulnerability (CNVD-2022-28488)

An out-of-bounds write vulnerability exists in Siemens Simcenter Femap, an advanced simulation application for creating, editing, and inspecting finite element models of complex products or systems, which can be exploited by attackers to execute code in the context of the current process...