2233 matches found
Eigen&Wijzer Ouderapp 安全漏洞
Eigen&Wijzer Ouderapp is a parent app from the individual developers of Wedaycare B.V.. It is used for parents to check on their children's lives. A security vulnerability exists in Eigen&Wijzer Ouderapp versions prior to v1.1.22, which stems from the fact that it allows an attacker to change the...
Arbitrary Code Execution
firefox-esr is vulnerable to arbitrary code execution. The vulnerability is possible because the cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions which allows an attacker to inject and execute arbitrary commands...
Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...
Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...
Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...
Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...
Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...
Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...
UBUNTU-CVE-2022-38473
A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions such as microphone or camera access. This vulnerability affects Thunderbird 102.2, Thunderbird 91.13, Firefox ESR 91.13, Firefox ESR 102.2, and Firefox 104...
ALPINE-CVE-2022-30698
NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...
CVE-2022-30698
NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...
[PNM-002] The expiry of the parent node can be smaller than the one of a child node, violating the guarantee policy
Lines of code Vulnerability details Description By design, the child node's expiry can only be extended up to the parent's current one. Adding these restrictions means that the ENS users only have to look at the name itself's fuses and expiry without traversing the hierarchy to understand what...
GHSA-CJ88-88MR-972W glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service ReDoS. This issue is fixed in version 6.0.1. This vulnerability is separate from GHSA-ww39-953v-wcq6...
@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)
glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory:...
glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service ReDoS. This issue is fixed in version 6.0.1. This vulnerability is separate from GHSA-ww39-953v-wcq6...
PT-2022-10388
Name of the Vulnerable Software and Affected Versions glob-parent versions prior to 6.0.1 Description The issue allows ReDoS regular expression denial of service attacks against the enclosure regular expression in the glob-parent package for Node.js. Recommendations For versions prior to 6.0.1,...
MAL-2022-2419 Malicious code in deneuve-package-parent (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3824ba1403d398ede377a0b2b56f340f4a5a1b25daca271f3c169e5e8e410d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gatsby-theme-parent (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f53bb4fb5a2b25bab79f0b368c1d2b32a3030b8cd9c9e83ab142708172d89e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3291 Malicious code in gatsby-theme-parent (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f53bb4fb5a2b25bab79f0b368c1d2b32a3030b8cd9c9e83ab142708172d89e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...