Cross site scripting

In Factor App Framework & Headless CMS forum plugin, versions v1.3.8 to v1.8.30, are vulnerable to reflected Cross-Site Scripting XSS at the “tags” and “category” parameters in the URL. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...

Cross site scripting

In Factor App Framework & Headless CMS v1.0.4 to v1.8.30, improperly invalidate a user’s session even after the user logs out of the application. In addition, user sessions are stored in the browser’s local storage, which by default does not have an expiration time. This makes it possible for an...

Cross site scripting

In Factor App Framework & Headless CMS forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site Scripting XSS at the “search” parameter in the URL. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...

CVE-2021-25985

In Factor (App Framework & Headless CMS) from v1.0.4 through v1.8.30, the vulnerability stems from improperly invalidating a user session after logout and storing sessions in browser local storage (which has no expiration). This enables an attacker to steal and reuse session data via XSS, potenti...

CVE-2021-25984 FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality

In Factor App Framework & Headless CMS forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting XSS at the “post reply” section. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...

CVE-2021-25984: Improper Neutralization of Input During Web Page Generation

In Factor App Framework & Headless CMS forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting XSS at the “post reply” section. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...

Crawlergo - A Powerful Browser Crawler For Web Vulnerability Scanners

crawlergo is a browser crawler that uses chrome headless mode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with intelligent JS event triggering, and collects as many entries exposed by the website as possible. Th...

deeplabcut (>=2.1.10.3, <=2.2.0rc2) potentially affected by CVE-2019-5064 via opencv-python-headless (3.4.9.33)

opencv-python-headless PYPI version 3.4.9.33 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deeplabcut =2.1.10.3, =2.2.0rc2 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

deeplabcutcore (>=0.0.0, <=0.1.0) potentially affected by CVE-2019-5064 via opencv-python-headless (3.4.16.57)

opencv-python-headless PYPI version 3.4.16.57 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deeplabcutcore =0.0.0, =0.1.0 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

deepomatic-cli (>=0.6.1, <=0.7.2), kuto (0.0.43) +2 more potentially affected by CVE-2019-5064 via opencv-python-headless (3.4.18.65)

opencv-python-headless PYPI version 3.4.18.65 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deepomatic-cli =0.6.1, =1.0.38, =1.0.44 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

dlc-generic-analysis (0.0.1rc3), multi-template-matching (>=1.5.1, <=1.5.3) +2 more potentially affected by CVE-2019-5064 via opencv-python-headless (>=4.1.0.25, <=4.1.2.30)

opencv-python-headless PYPI version =4.1.0.25, =1.5.1, =0.0.1, =0.0.3 Source cves: CVE-2019-5064 Source advisory: GHSA-Q799-Q27X-VP7W...

dlc-generic-analysis (0.0.1rc3), multi-template-matching (>=1.5.1, <=1.5.3) +2 more potentially affected by CVE-2019-5064 via opencv-python-headless (>=4.1.0.25, <=4.1.2.30)

opencv-python-headless PYPI version =4.1.0.25, =1.5.1, =0.0.1, =0.0.3 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

satsense (0.9.0) potentially affected by CVE-2019-5064 via opencv-contrib-python-headless (3.4.2.17)

opencv-contrib-python-headless PYPI version 3.4.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python-headless and may be impacted: - satsense 0.9.0 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

ximilar-client (>=1.0.2, <=1.10.1) potentially affected by CVE-2019-5064 via opencv-contrib-python-headless (3.4.3.18)

opencv-contrib-python-headless PYPI version 3.4.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python-headless and may be impacted: - ximilar-client =1.0.2, =1.10.1 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7...

j5 (0.7.1), zoloto (0.3.0) potentially affected by CVE-2019-5064 via opencv-contrib-python-headless (3.4.18.65)

opencv-contrib-python-headless PYPI version 3.4.18.65 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python-headless and may be impacted: - j5 0.7.1 - zoloto 0.3.0 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

pyvisauto (>=1.0.1, <=1.0.3), ximilar-client (>=1.10.2, <=1.10.26) +1 more potentially affected by CVE-2019-5064 via opencv-contrib-python-headless (>=4.0.1.24, <=4.1.2.30)

opencv-contrib-python-headless PYPI version =4.0.1.24, =1.0.1, =1.10.2, =0.6.0, =0.6.1 Source cves: CVE-2019-5064 Source advisory: GHSA-Q799-Q27X-VP7W...

pyvisauto (>=1.0.1, <=1.0.3), ximilar-client (>=1.10.2, <=1.10.26) +1 more potentially affected by CVE-2019-5064 via opencv-contrib-python-headless (>=4.0.1.24, <=4.1.2.30)

opencv-contrib-python-headless PYPI version =4.0.1.24, =1.0.1, =1.10.2, =0.6.0, =0.6.1 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

deeplabcut (>=2.1.10.3, <=2.2.0rc2) potentially affected by CVE-2019-5063 via opencv-python-headless (3.4.9.33)

opencv-python-headless PYPI version 3.4.9.33 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deeplabcut =2.1.10.3, =2.2.0rc2 Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...

deeplabcutcore (>=0.0.0, <=0.1.0) potentially affected by CVE-2019-5063 via opencv-python-headless (3.4.16.57)

opencv-python-headless PYPI version 3.4.16.57 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deeplabcutcore =0.0.0, =0.1.0 Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...

deepomatic-cli (>=0.6.1, <=0.7.2), kuto (0.0.43) +2 more potentially affected by CVE-2019-5063 via opencv-python-headless (3.4.18.65)

opencv-python-headless PYPI version 3.4.18.65 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deepomatic-cli =0.6.1, =1.0.38, =1.0.44 Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...