1878 matches found
Malicious code in gatsby-theme-parent (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f53bb4fb5a2b25bab79f0b368c1d2b32a3030b8cd9c9e83ab142708172d89e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3291 Malicious code in gatsby-theme-parent (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f53bb4fb5a2b25bab79f0b368c1d2b32a3030b8cd9c9e83ab142708172d89e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-41754
dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...
CVE-2021-41754
dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...
CVE-2022-1821
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...
CVE-2022-1821
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...
CVE-2022-1821
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...
CVE-2022-1821
CVE-2022-1821 affects GitLab CE/EE: vulnerable in versions 10.8–14.9.4, 14.10.0–14.10.3, and 15.0.0. It may allow a subgroup member to access the parent group’s members list. Remediation: upgrade to fixed versions 14.9.5, 14.10.4, or 15.0.1, respectively. No exploitation details or in-the-wild st...
CVE-2022-1821
Removed by vendor...
CVE-2022-1821
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...
PT-2022-14140 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.8 through 14.9.4 GitLab CE/EE versions 14.10 through 14.10.3 GitLab CE/EE versions 15.0 through 15.0.0 Description: An issue has been discovered in GitLab CE/EE. It may be possible for a subgroup member to access the...
GitLab Community Edition和GitLab Enterprise Edition 资源管理错误漏洞
GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A resource management error vulnerability exists in GitLab Community Edition and GitLa...
Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the...
Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the...
Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the...
Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the...
Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the...
Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the...