1557 matches found
CVE-2024-1256
A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/collect/filtertext.do. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2024-1257: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Jspxcms 10.2.0. It has been classified as problematic. Affected is an unknown function of the file /ext/collect/findtext.do. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...
CVE-2024-1256: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/collect/filtertext.do. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2023-7104: Heap-based Buffer Overflow
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...
TYPO3-EXT-SA-2023-011: Configuration Injection in extension "Direct Mail" (direct_mail)
More info at https://typo3.org/security/advisory/typo3-ext-sa-2023-011...
kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nftpipaporemove function with the element, without a NFTSETEXTKEYEND. This issue could allow a local user to crash the system or potentially escalate their privileges on the system...
TYPO3-EXT-SA-2023-009: Insecure Direct Object Reference in extension "Content Consent" (content_consent)
More info at https://typo3.org/security/advisory/typo3-ext-sa-2023-009...
TYPO3-EXT-SA-2023-009: Insecure Direct Object Reference in extension "Content Consent" (content_consent)
More info at https://typo3.org/security/advisory/typo3-ext-sa-2023-009...
Malicious code in ext-frontend-identity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23a7d0539d44404b1c2e340d011eaa58dcad96a27d7d6aef90736d641da7ce39 The OpenSSF Package Analysis project identified 'ext-frontend-identity' @ 7.1.1-develop.9 npm as malicious. It is considered malicious because: ...
MAL-2023-8516 Malicious code in ext-frontend-identity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23a7d0539d44404b1c2e340d011eaa58dcad96a27d7d6aef90736d641da7ce39 The OpenSSF Package Analysis project identified 'ext-frontend-identity' @ 7.1.1-develop.9 npm as malicious. It is considered malicious because: ...
Malicious code in ext-frontend-esignature (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcffa9ade419d008513b815bd316ec2f2100a8a3510b692cb84a11ca2e5b2ac6 The OpenSSF Package Analysis project identified 'ext-frontend-esignature' @ 2.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2023-8513 Malicious code in ext-frontend-esignature (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcffa9ade419d008513b815bd316ec2f2100a8a3510b692cb84a11ca2e5b2ac6 The OpenSSF Package Analysis project identified 'ext-frontend-esignature' @ 2.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2023-8398 Malicious code in @tpci/i18next-ext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14a4fd8041934f617af9e84fb00ca939b961316d3d7b9519c286dd93035801c8 The OpenSSF Package Analysis project identified '@tpci/i18next-ext' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in i18next-ext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e71c3a73449651c3bbbef4cc540bb5df6e12736e304e95a5a64f2c0c9f55189 The OpenSSF Package Analysis project identified 'i18next-ext' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8397 Malicious code in i18next-ext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e71c3a73449651c3bbbef4cc540bb5df6e12736e304e95a5a64f2c0c9f55189 The OpenSSF Package Analysis project identified 'i18next-ext' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...
CVE-2023-45750
CVE-2023-45750 concerns the Nexter Extension plugin for WordPress (POSIMYTH Nexter Extension) with an unauthenticated reflected XSS vulnerability in versions
Malicious code in nnabla-ext-cuda101-nccl2-ubuntu16 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70047d0a5eb542220386cc3c3f7f8bd4bee3faa63ce2124f363abcc1503be3df The OpenSSF Package Analysis project identified 'nnabla-ext-cuda101-nccl2-ubuntu16' @ 0.0.2 pypi as malicious. It is considered malicious becaus...
PT-2023-9492 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the phy component of the Linux kernel, specifically with the lynx-28g driver. The problem arises from concurrent calls to phy set mode ext on lanes sharing the...
TYPO3-EXT-SA-2023-008: Broken Access Control in extension "femanager" (femanager)
More info at https://typo3.org/security/advisory/typo3-ext-sa-2023-008...
Improper Control of Generation of Code ('Code Injection') in jai-ext
Impact Programs using jt-jiffle, and allowing Jiffle script to be provided via network request, are susceptible to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Patches Version 1.2.22...