3601 matches found
ids-enterprise-ng (>=4.10.0-beta.0, <=5.3.0) potentially affected by unknown CVE via ids-enterprise (>=4.10.0, <=4.18.1)
ids-enterprise NPM version =4.10.0, =4.10.0-beta.0, =5.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HPFQ-8WX8-CGQW...
ids-enterprise-ng (>=4.10.0-beta.0, <=5.3.0) potentially affected by unknown CVE via ids-enterprise (>=4.10.0, <=4.18.1)
ids-enterprise NPM version =4.10.0, =4.10.0-beta.0, =5.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-CRFX-5PHG-HMW9...
Malicious Package
ng-ui-library contains malicious code. The code when executed in the browser would get password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...
Malicious Package
Overview Version 1.0.987 of ng-ui-library contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment an...
CVE-2019-12135
An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier allows remote attackers to execute arbitrary code via an unspecified vector...
CVE-2019-12135
An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier allows remote attackers to execute arbitrary code via an unspecified vector...
CVE-2019-12135
CVE-2019-12135 concerns PaperCut MF and NG, affecting the application server in versions 18.3.8 and earlier and 19.0.3 and earlier. The vulnerability is unspecified in nature but enables remote attackers to execute arbitrary code via an unspecified vector. The available documents do not provide d...
CVE-2019-10326
A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...
Cross site request forgery (csrf)
A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...
Cross site scripting
A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...
CVE-2019-10325
A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...
CVE-2019-10326
A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...
CVE-2019-10326
A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...
CVE-2019-10326
The CVE-2019-10326 issue affects Jenkins Warnings NG Plugin ≤ 5.0.0. A cross-site request forgery (CSRF) vulnerability allows attackers to reset warning counts for future builds. Root cause: CSRF in the plugin’s handling of build-warnings state. Impact is limited to unauthorized state change of b...
CVE-2019-10325
A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...
CVE-2019-10325
CVE-2019-10325 affects the Jenkins Warnings NG Plugin, version 5.0.0 and earlier. The issue is described as a cross-site scripting vulnerability that allows an attacker with Job/Configure permission to inject arbitrary JavaScript into build overview pages. The underlying cause is a stored/xss-lik...
CVE-2019-10325
A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...
F5 Networks BIG-IP : Side-channel processor vulnerability (K54252492)
The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.2.3 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K54252492 advisory. - Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosu...