2801 matches found
GHSA-W4WQ-RVMQ-77X7 Cross-site scripting in anchorme
All versions of package anchorme are vulnerable to Cross-site Scripting XSS via the main functionality...
Cross-site scripting in anchorme
All versions of package anchorme are vulnerable to Cross-site Scripting XSS via the main functionality...
Command injection
All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization...
Know where your project stands with the new project overview!
In late April, I introduced the new project experience for SonarCloud, which has already been adopted by a lot of you. Today, we’re adding a brand new project overview page! We can’t wait for you to try it! Let’s discover what’s inside in this blog. Your project status & activity all in one place...
br.com.damsete.arq:damsete-arq (>=0.0.9 <=0.0.12), br.com.damsete.arq:damsete-arq-audit (>=0.0.9 <=0.0.12) +481 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-core (>=5.2.0.RELEASE <=5.2.10.RELEASE)
org.springframework.security:spring-security-core MAVEN version =5.2.0.RELEASE, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =2.0.2, =2.0.2, =2.0.2, =2.0.2, =2.0.2, =2.0.3 - com.c4-soft.springaddons:spring-security-oauth2-addons =1.0.0 -...
CVE-2020-23179
A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...
The vulnerability of the qemu-seccomp.c component of the QEMU hardware emulator, related to the use of an incomplete black list, allows a hacker to trigger a service failure.
The vulnerability of the qemu-seccomp.c component of the QEMU hardware emulator lies in the use of the seccomp policy only for the main thread. Exploiting this vulnerability allows an attacker to cause a system failure...
Php-fusion PHP-Fusion 跨站脚本漏洞
PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in administration/settingsmain.php in PHP-Fusion, which can be exploited to execute arbitrary web script or HTML via the "site footer" field...
PT-2021-15489 · Lutils · Lutils
Name of the Vulnerable Software and Affected Versions: lutils versions prior to a fixed version Description: The issue concerns Prototype Pollution via the main merge function. This allows for potential manipulation of the prototype, which can lead to various security issues. Recommendations: For...
com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-application (>=1.0.2 <=1.0.4), com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-main (>=1.0.2 <=1.0.4) +396 more potentially affected by CVE-2020-10688 via org.jboss.resteasy:resteasy-core (>=4.0.0.Beta6 <=4.5.2.Final)
org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.Beta6, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3, =1.0.2, =1.26.0, =0.0.1, =0.0.1, =0.0.1, =5.6.0, =5.3.0, =5.7.4 and more Source cves: CVE-2020-10688 Source advisory: OSV:GHSA-29QJ-RVV6-QRMVhttps...
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
Design/Logic Flaw
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
UBUNTU-CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
CVE-2021-26197
Removed by vendor...
JerryScript 代码问题漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which originates from a SEGV in mainprintunhandledexception in the main-utils.c file.No detailed vulnerability details are available at this time...
The vulnerability of the main() function in the Exim message forwarding agent lies in the fact that it allows writing beyond the buffer boundaries in memory. This enables a hacker to increase their privileges within the system and execute arbitrary code.
The vulnerability of the main function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...
Important: Red Hat Security Advisory: glib2 security update
An update for glib2 is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact...
DEBIAN-CVE-2021-3548
A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy inside the main function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...