moodle.sistemadivinaprovidencia.org Cross Site Scripting vulnerability OBB-2895311

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ms-mnhradiste.cz Cross Site Scripting vulnerability OBB-2878018

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

suzukivision.com Cross Site Scripting vulnerability OBB-2867508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OSV-2022-780 Index-out-of-bounds in is_same_net6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50599 Crash type: Index-out-of-bounds Crash state: issamenet6 dhcp6mayberelay dhcp6mayberelay...

poiskfoto.ru Cross Site Scripting vulnerability OBB-2854222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in pth-isabsolute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 511f89056eb7d2d4ed445d2748875f6edc9fef53121902c427665d417f3c2bdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

aterteramo.it Cross Site Scripting vulnerability OBB-2848491

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mariadb: crash when using HAVING with IS NULL predicate in an equality

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/itemcmpfunc.h, impacting availability...

mariadb: crash when using HAVING with IS NULL predicate in an equality

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/itemcmpfunc.h, impacting availability...

mariadb: crash when using HAVING with IS NULL predicate in an equality

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/itemcmpfunc.h, impacting availability...

CVE-2022-37010

In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed...

CVE-2022-37010

CVE-2022-37010 affects JetBrains IntelliJ IDEA prior to 2022.2, due to missing email address validation in the "Git User Name Is Not Defined" dialog. Root cause: absence of validation in that dialog as described in multiple sources (NVD/Red Hat/CVE records, PT-2022-23755). Reported impact is low ...

rasehund.no Cross Site Scripting vulnerability OBB-2815155

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

giovannidalpra.it Cross Site Scripting vulnerability OBB-2806483

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

deterugwinning.nl Cross Site Scripting vulnerability OBB-2781922

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-29600

The oelib aka One is Enough Library extension through 4.1.5 for TYPO3 allows SQL Injection...

CVE-2022-29600

The CVE-2022-29600 vulnerability affects the TYPO3 oelib (One is Enough Library) extension up to version 4.1.5, which allows SQL Injection. The available data confirms the vulnerable component is the oelib TYPO3 extension and that the issue is an SQL injection vulnerability; there are no further ...

CVE-2022-30620

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "isadmin", "showConfig". Administrative Privileges which allows changing various configuration in the camera...

Malicious code in @it-eng/is-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 222c4fa0fc8aa8a9bbd67c4c4a681db16cc9c016c106cb0348732533a8ed57b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-366 Malicious code in @it-eng/is-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 222c4fa0fc8aa8a9bbd67c4c4a681db16cc9c016c106cb0348732533a8ed57b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...