PT-2024-40190 · Packagist · Typo3/Cms-Core

Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided. Description: The issue arises from improper encoding of user input, making the login status display susceptible to cross-site scripting in the website frontend. To exploit this, a valid...

PT-2024-40534 · Packagist · Typo3/Cms-Core

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows existing sessions for a user account to remain active even after the user changes their password. To exploit this, an attacker would need a valid user account, either...

PT-2024-40503 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: Typo3 affected versions not specified Description: The issue concerns cross-site scripting vulnerabilities in two separate areas. Firstly, the typolink functionality in the website's frontend incorrectly parses values assigned to HTML...

MAL-2024-1530 Malicious code in frontend-datatable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c7c2e13212e99fdaaa2039f7c837f80d08d0a6510e315a3db617cf16f49b477 The OpenSSF Package Analysis project identified 'frontend-datatable' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in frontend-datatable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c7c2e13212e99fdaaa2039f7c837f80d08d0a6510e315a3db617cf16f49b477 The OpenSSF Package Analysis project identified 'frontend-datatable' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

Cross-Site Scripting

shopware/shopware is vulnerable to Cross-Site Scripting. The vulnerability is due to inadequate input sanitization in the frontend, which allows an attacker to inject and execute malicious scripts in the context of a victim’s web browser...

moby/buildkit: Possible race condition with accessing subpaths from cache mounts

A vulnerability was found in the Moby Builder Toolkit. A malicious BuildKit client or any frontend that can craft a request could lead to the BuildKit daemon crashing with a panic due to the lack of input validation. A frontend is usually specified as the syntax line on a Dockerfile or with the...

Shopware Non-Persistent XSS in the Frontend

A non-persistent Cross-Site Scripting XSS vulnerability has been identified in the Shopware eCommerce platform within the frontend. This vulnerability may allow an attacker to inject and execute malicious scripts in the context of a victim's web browser...

PT-2024-40354 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware eCommerce platform affected versions not specified Description: A non-persistent Cross-Site Scripting XSS issue has been identified in the frontend of the platform. This issue may allow an attacker to inject and execute malicious...

PT-2024-26880 · Tine · Tine

Name of the Vulnerable Software and Affected Versions: tine versions prior to 2023.11.8 Description: The issue allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php, when an LDAP backend is used...

CVE-2023-51483

Improper Privilege Management vulnerability in Glowlogix WP Frontend Profile allows Privilege Escalation.This issue affects WP Frontend Profile: from n/a through 1.3.1...

CVE-2023-47682

Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP User Frontend: from n/a through 3.6.5...

CVE-2023-51483 WordPress WP Frontend Profile plugin <= 1.3.1 - Unauthenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Glowlogix WP Frontend Profile allows Privilege Escalation.This issue affects WP Frontend Profile: from n/a through 1.3.1...

CVE-2023-47682 WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP User Frontend: from n/a through 3.6.5...

CVE-2023-47682 WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP User Frontend: from n/a through 3.6.5...

WordPress plugin WP User Frontend 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin WP Frontend Profile 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-14142 · Glowlogix · Glowlogix Wp Frontend Profile

Name of the Vulnerable Software and Affected Versions: Glowlogix WP Frontend Profile versions 1.3.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Glowlogix WP Frontend Profile. Recommendations: For Glowlogix WP Frontend Profile...

SQL Injection

Overview Npgsql is a .NET data provider for PostgreSQL. Affected versions of this package are vulnerable to SQL Injection by overflowing the sum of the integer and parameter lengths in NpgsqlConnector.FrontendMessages.cs, allowing arbitrary SQL to be injected into a PostgreSQL protocol message if...

Malicious code in @ssr-frontend/test-poc3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03b39fa743b5b3cc6ff2265f4913473e51a661ac1f7d41f7855e4ced61af77aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...