js-audio-converter.com Cross Site Scripting vulnerability OBB-2370527

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross-site Scripting (XSS) - Reflected in gnuboard/gnuboard5

Description https://github.com/gnuboard/gnuboard5/blob/v5.4.22/mobile/shop/lg/mispwapurl.phpL7 has no filtering for the variable. So, Attackers can trigger Reflected XSS via $GET'LGDOID' Proof of Concept /mobile/shop/lg/mispwapurl.php?LGDOID=%3Cscript%3Ealert1%3C/script%3E Impact Attacker can...

ua-parser-js Regular Expression Denial of Service vulnerability

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service ReDoS in multiple regexes see linked commit for more info...

GHSA-394C-5J6W-4XMX ua-parser-js Regular Expression Denial of Service vulnerability

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service ReDoS in multiple regexes see linked commit for more info...

GHSA-MQGV-67VX-G4M5 Prototype Pollution in js-data

All versions of package js-data prior to 3.0.10 are vulnerable to Prototype Pollution via the deepFillIn function...

Prototype Pollution in js-data

All versions of package js-data prior to 3.0.10 are vulnerable to Prototype Pollution via the deepFillIn function...

AZL-45156 CVE-2022-0536 affecting package js-jquery 3.5.0-4

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

Denial Of Service (DoS)

radare2.js is vulnerable to denial of service. The vulnerability exists due to the out-of-bound read in the library, allowing an attacker to access the memory location beyond the buffer length, leading to an application crash...

Denial Of Service (DoS)

radare2.js is vulnerable to denial of service. The vulnerability exists due to the out-of-bound read in the library, allowing an attacker to access the memory location beyond the buffer, leading to an application crash...

AlmaLinux 8 : python-lxml (ALSA-2021:4158)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4158 advisory. - An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safeattrsonly and forms arguments, the Cleaner class...

CVE-2022-0522

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

CVE-2022-0522

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

CVE-2022-0520

Use After Free in NPM radare2.js prior to 5.6.2...

CVE-2022-0520

Use After Free in NPM radare2.js prior to 5.6.2...

CVE-2022-0522

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

Design/Logic Flaw

Use After Free in NPM radare2.js prior to 5.6.2...

CVE-2022-0520

Use After Free in NPM radare2.js prior to 5.6.2...

Memory corruption

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

UBUNTU-CVE-2022-0522

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

CVE-2022-0522

CVE-2022-0522 concerns radare2/radare2.js: prior to 5.6.2, the NPM package allows access of memory location before the start of a buffer. Connected sources confirm this vulnerability is tied to radare2.js code paths and have led to vendor advisories and patch releases (e.g., radare2 5.6.4 and rel...