517 matches found
EUVD-2022-0532
Malicious code in bioql PyPI...
EUVD-2022-1139
Malicious code in bioql PyPI...
EUVD-2022-1157
Malicious code in bioql PyPI...
anti-xss
This is a PHP library called AntiXSS, which is designed to prevent cross-site scripting XSS attacks. The library provides a set of functions to sanitize user input and protect against XSS vulnerabilities. The library is maintained by Lars Moelleken and is available on Packagist, a popular PHP...
Linux Distros Unpatched Vulnerability : CVE-2022-24828
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call VcsDriver::getFileContent can have a code injection...
Composer: Multiple Vulnerabilities
Background Composer is a dependency manager for the PHP programming language. Description Integrators using Composer code to call VcsDriver::getFileContent can have a code injection vulnerability if the user can control the $file or $identifier argument. This leads to a vulnerability on...
CVE-2022-0579
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
CVE-2022-0692
Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1...
CVE-2022-0262
Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.7...
CVE-2022-0597
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0539
Cross-site Scripting XSS - Stored in Packagist ptrofimov/beanstalkconsole prior to 1.7.14...
CVE-2022-0678
Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0414
Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0...
CVE-2022-0612
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0505
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
BIT-DOLIBARR-2022-0414 Improper Validation of Specified Quantity in Input in dolibarr/dolibarr
Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0...
CVE-2022-0557
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0278
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...