@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +49 more potentially affected by CVE-2023-36472 via @strapi/plugin-content-manager (>=0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, <=4.11.6)

@strapi/plugin-content-manager NPM version =0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-36472 Source advisory: MEND:CVE-2023-36472...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +51 more potentially affected by CVE-2023-37263 via @strapi/plugin-content-manager (>=4.0.0-beta.0, <=4.12.0)

@strapi/plugin-content-manager NPM version =4.0.0-beta.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-37263 Source advisory: OSV:GHSA-M284-85MF-CGRC...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +51 more potentially affected by CVE-2023-37263 via @strapi/plugin-content-manager (>=4.0.0-beta.0, <=4.12.0)

@strapi/plugin-content-manager NPM version =4.0.0-beta.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-37263 Source advisory: GHSA-M284-85MF-CGRC...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +48 more potentially affected by CVE-2023-36472 via @strapi/plugin-content-manager (>=4.0.0-beta.0, <=4.11.6)

@strapi/plugin-content-manager NPM version =4.0.0-beta.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-36472 Source advisory: OSV:GHSA-V8GG-4MQ2-88Q4...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +48 more potentially affected by CVE-2023-36472 via @strapi/plugin-content-manager (>=4.0.0-beta.0, <=4.11.6)

@strapi/plugin-content-manager NPM version =4.0.0-beta.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-36472 Source advisory: GHSA-V8GG-4MQ2-88Q4...

SUSE CVE-2009-3385

The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash objec...

PT-2023-9887 · Unknown · Gesellix Titlelink

Name of the Vulnerable Software and Affected Versions: gesellix titlelink affected versions not specified Description: A critical issue was found in gesellix titlelink on Joomla, affecting an unknown functionality of the file plugin content title.php. The manipulation of the phrase argument leads...

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

@mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.1), @strapi/admin (>=0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, <=0.0.0-next.ff946d2c25a3e577b47132a357cac2932eb8e635) +3 more potentially affected by CVE-2022-30617 via @strapi/strapi (>=0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, <=4.0.0-beta.0)

@strapi/strapi NPM version =0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, =1.0.0-alpha.0, =0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, =0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, =0.0.0-a9fe3a0191870500b7f56ff7dd30fdda494e666a, =0.0.0-next.f45143c5e2a8a9d85691d0abf79a3f42024a0c71 Sourc...

Insecure Authorization

strapi-plugin-content-type-builder suffers from insecure authorization. The admin::hasPermissions restriction for the content-type-builder CTB routes are not configured, allowing unauthorized access to the affected resources...

@koj/strapi (>=0.0.0, <=1.4.0), strapi-editorjs (0.0.1) +1 more potentially affected by CVE-2020-27666 via strapi-plugin-content-manager (>=3.0.0-beta.18.7, <=3.1.6)

strapi-plugin-content-manager NPM version =3.0.0-beta.18.7, =0.0.0, =0.0.1-alpha.1, =0.0.1-alpha.2 Source cves: CVE-2020-27666 Source advisory: OSV:GHSA-QVP5-MM7V-4F36...

@koj/strapi (>=0.0.0, <=1.4.0), strapi-editorjs (0.0.1) +1 more potentially affected by CVE-2020-27666 via strapi-plugin-content-manager (>=3.0.0-beta.18.7, <=3.1.6)

strapi-plugin-content-manager NPM version =3.0.0-beta.18.7, =0.0.0, =0.0.1-alpha.1, =0.0.1-alpha.2 Source cves: CVE-2020-27666 Source advisory: GHSA-QVP5-MM7V-4F36...

@koj/strapi (>=0.0.0, <=1.4.0) potentially affected by CVE-2020-27665 via strapi-plugin-content-type-builder (3.1.6)

strapi-plugin-content-type-builder NPM version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on strapi-plugin-content-type-builder and may be impacted: - @koj/strapi =0.0.0, =1.4.0 Source cves: CVE-2020-27665 Source advisory: OSV:GHSA-4P55-XJ37-FX...

@koj/strapi (>=0.0.0, <=1.4.0) potentially affected by CVE-2020-27665 via strapi-plugin-content-type-builder (3.1.6)

strapi-plugin-content-type-builder NPM version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on strapi-plugin-content-type-builder and may be impacted: - @koj/strapi =0.0.0, =1.4.0 Source cves: CVE-2020-27665 Source advisory: GHSA-4P55-XJ37-FX7G...

@koj/strapi (>=0.0.0, <=1.4.0) potentially affected by CVE-2020-27665 via strapi-plugin-content-type-builder (3.1.6)

strapi-plugin-content-type-builder NPM version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on strapi-plugin-content-type-builder and may be impacted: - @koj/strapi =0.0.0, =1.4.0 Source cves: CVE-2020-27665 Source advisory: MEND:CVE-2020-27665...

@koj/strapi (>=0.0.0, <=1.4.0), strapi-editorjs (0.0.1) +1 more potentially affected by CVE-2020-27666 via strapi-plugin-content-manager (>=3.0.0-beta.18.7, <=3.1.6)

strapi-plugin-content-manager NPM version =3.0.0-beta.18.7, =0.0.0, =0.0.1-alpha.1, =0.0.1-alpha.2 Source cves: CVE-2020-27666 Source advisory: MEND:CVE-2020-27666...

Monstra CMS 3.0.4 - Remote Code Execution

Monstra CMS 3.0.4 - Remote Code Execution. CVE-2018-9037. Webapps exploit for PHP platform Exploit Title: Monstra CMS 3.0.4 Upload Plugin Remote code execution CVE-2018-9037 Date: 2018-05-14 Exploit Author: Jameel Nabbo Vendor Homepage: https://github.com/monstra-cms/monstra Software Link:...

Monstra CMS 3.0.4 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Monstra CMS 3.0.4 Upload Plugin Remote code execution CVE-2018-9037 Exploit Author: Jameel Nabbo Vendor Homepage: https://github.com/monstra-cms/monstra Software Link: https://github.com/monstra-cms/monstra Version: 3.0.4 Tested...

Google to Pause Flash Ads in Chrome Starting Next Week

Google on Tuesday will begin pausing Flash ads by default in Chrome, a move that is designed mainly to help improve browser speed, but that will also be a security upgrade for users. The company announced the plan back in June and said this week that it will make the behavior the default setting...

CVE-2010-1214

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements...