Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...

Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...

Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...

UBUNTU-CVE-2022-38473

A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions such as microphone or camera access. This vulnerability affects Thunderbird 102.2, Thunderbird 91.13, Firefox ESR 91.13, Firefox ESR 102.2, and Firefox 104...

ALPINE-CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

[PNM-002] The expiry of the parent node can be smaller than the one of a child node, violating the guarantee policy

Lines of code Vulnerability details Description By design, the child node's expiry can only be extended up to the parent's current one. Adding these restrictions means that the ENS users only have to look at the name itself's fuses and expiry without traversing the hierarchy to understand what...

GHSA-CJ88-88MR-972W glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service ReDoS. This issue is fixed in version 6.0.1. This vulnerability is separate from GHSA-ww39-953v-wcq6...

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service ReDoS. This issue is fixed in version 6.0.1. This vulnerability is separate from GHSA-ww39-953v-wcq6...

@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)

glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory:...

PT-2022-10388

Name of the Vulnerable Software and Affected Versions glob-parent versions prior to 6.0.1 Description The issue allows ReDoS regular expression denial of service attacks against the enclosure regular expression in the glob-parent package for Node.js. Recommendations For versions prior to 6.0.1,...

MAL-2022-2419 Malicious code in deneuve-package-parent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3824ba1403d398ede377a0b2b56f340f4a5a1b25daca271f3c169e5e8e410d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3291 Malicious code in gatsby-theme-parent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f53bb4fb5a2b25bab79f0b368c1d2b32a3030b8cd9c9e83ab142708172d89e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-theme-parent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f53bb4fb5a2b25bab79f0b368c1d2b32a3030b8cd9c9e83ab142708172d89e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-41754

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

CVE-2021-41754

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

PT-2022-11477

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions 3.10 and earlier Description The issue is related to SQL injection in the parent parameter of the "index.php" endpoint. This allows for potential exploitation. Recommendations For dynamicMarkt versions 3.10 and earlier, a...

CVE-2021-41754: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

CVE-2022-1821

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...

CVE-2022-1821

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...