14 matches found
Malicious code in input-error-field (npm)
Source: ossf-package-analysis 79dcfa06fd8077b1f16a7239a63b81c36bf0fdc404da2afcbe7ae40333f1c04d The OpenSSF Package Analysis project identified 'input-error-field' @ 3.7.14 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
EUVD-2025-199990
A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the login.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg and...
CVE-2025-48065
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a field with an error contains malicious content. Versions 2.7.13 and 3.2.2 protect rendered HTML content...
CVE-2025-48065: Improper Neutralization of Input During Web Page Generation
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a field with an error contains malicious content. Versions 2.7.13 and 3.2.2 protect rendered HTML content...
CentOS 7 : kernel (RHSA-2021:0336)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0336 advisory. - Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by...
MAL-2023-8617 Malicious code in input-error-field (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79dcfa06fd8077b1f16a7239a63b81c36bf0fdc404da2afcbe7ae40333f1c04d The OpenSSF Package Analysis project identified 'input-error-field' @ 3.7.14 npm as malicious. It is considered malicious because: - The package...
SUSE CVE-2015-8961
The ext4journalstop function in fs/ext4/ext4jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service use-after-free by leveraging improper access to a certain error field...
Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.
...
DEBIAN-CVE-2020-15436
Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field...
CVE-2020-15436
Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field...
UBUNTU-CVE-2020-15436
Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field...
CVE-2020-15436
Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field...
CVE-2020-15436
Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field...
DEBIAN-CVE-2015-8961
The ext4journalstop function in fs/ext4/ext4jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service use-after-free by leveraging improper access to a certain error field...