9719 matches found
CVE-2022-1740
The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...
Design/Logic Flaw
The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...
CVE-2022-1740 2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283
The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...
PT-2022-6323 · Canonical · Ubuntu
Name of the Vulnerable Software and Affected Versions: Mahara versions 21.04 through 21.04.6 Mahara versions 21.10 through 21.10.4 Mahara versions 22.04 through 22.04.2 Mahara version 22.10.0 Description: The vulnerability exists due to the lack of protection of the web page structure in the PDF...
MAL-2022-3250 Malicious code in fusion-tables-drive-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e517db93a2666a82a94bd6147c6e795120071a2af38530dbf664fe52b42ff9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fusion-tables-drive-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e517db93a2666a82a94bd6147c6e795120071a2af38530dbf664fe52b42ff9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in range-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87e0eaef734e8f48ec3ef78b1404dcf4119124df9a8ac563e13abc11d267a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5588 Malicious code in range-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87e0eaef734e8f48ec3ef78b1404dcf4119124df9a8ac563e13abc11d267a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in plugin-proposal-export-default-from (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09e67c1f58311edfee436c15f6e587d6bfc574cf3ea5c5a69afaea70790652b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-arm-storageimportexport-samples-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b652c2bfd2234d5572f74a8c829d6ba3c5bc908f86b849767cf67e9f780db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1290 Malicious code in azure-arm-storageimportexport-samples-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b652c2bfd2234d5572f74a8c829d6ba3c5bc908f86b849767cf67e9f780db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress plugin XML Sitemaps 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions prior to WordPress plugin XML Sitemaps 4.1.3,...
Information Disclosure via Export Module
Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C 4.0 Problem The export functionality fails to limit the result set to allowed columns of a particular database table. This allows authenticated users to export internal details of database tables to which they already have...
GHSA-8GMV-9HWG-W89G Information Disclosure via Export Module
Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C 4.0 Problem The export functionality fails to limit the result set to allowed columns of a particular database table. This allows authenticated users to export internal details of database tables to which they already have...
GHSA-7RQ4-QCPW-74GQ Formula Injection in Exported Data
Impact Datasets exported to file e.g. CSV / XLS are not sufficiently sanitized, to neutralize potential formula injection Patches - The issue is addressed in the upcoming 0.8.0 release - This fix will also be back-ported to the 0.7.x branch, applied to the 0.7.2 release Workarounds Users exportin...
CVE-2022-29452
Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...
CVE-2022-29452
Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...
Cross site scripting
Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...
CVE-2022-29452 WordPress Export All URLs plugin <= 4.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated editor or higher user role Stored Cross-Site Scripting XSS vulnerability in Export All URLs plugin = 4.1 at WordPress...
