117 matches found
Malicious code in spr-svg-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a0110f4b8f50e4633d5a315a6d446989ffe4e78d529a0d9aaa01a59d28229d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in spr-svg-loaders (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c5b0d1a333a9431186458407626a6494ea307d7fb401b66bd9a25385577eb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6265 Malicious code in spr-svg-loaders (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c5b0d1a333a9431186458407626a6494ea307d7fb401b66bd9a25385577eb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
HPESBNS04260 rev.1 - HPE Virtualized Converged NonStop X NS2 VHOST CLIMs Using PolKit's Pkexec Utility, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. CLIM DVD Installation Software T0853 T0853L03^DBA - T0853L03^DCH CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-4034 |...
spr-journal.ru Cross Site Scripting vulnerability OBB-2144664
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
HPESBNS04081 rev.1 - HPE Web ViewPoint Suite, Remote Unauthorized Access
Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Web ViewPoint T0320 - L, J and H series Web ViewPoint Plus T0952 - L, J and H series Web ViewPoint Enterprise T0986 - L, J and H series CVSS Scores: | CVE | CVSS Vector | Base...
spr-journal.ru Cross Site Scripting vulnerability OBB-1221263
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Design/Logic Flaw
This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...
CVE-2016-0282
Cross-site scripting XSS vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS...
CVE-2016-0282
Cross-site scripting XSS vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS...
CVE-2016-0304
CVE-2016-0304 affects IBM Domino Java Console authentication via UNC-share pathnames; vulnerable in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6. Root cause noted as an incomplete fix for CVE-2011-0920. The issue enables an unauthenticated, remote attacker to bypass authenticat...
CVE-2015-2015
Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...
Cross site scripting
Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...
CVE-2015-2015
Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...
CVE-2015-1903
Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y...
CVE-2015-1902
Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSMLA...
Stack overflow
Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y...
Stack overflow
Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSMLA...
CVE-2015-0135
IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of service integer truncation and application crash via a crafted GIF image, aka SPR KLYH9T7NT9...