[SECURITY] Fedora 35 Update: golang-github-emicklei-restful-3.8.0-1.fc35

Package for building REST-style Web Services using Go...

[SECURITY] Fedora 36 Update: golang-github-emicklei-restful-3.8.0-1.fc36

Package for building REST-style Web Services using Go...

PT-2022-22046 · Jenkins · Jenkins Embeddable Build Status Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Embeddable Build Status Plugin versions 2.0.3 and earlier Description: The issue allows attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system by exploiting a relative path...

Malicious code in iss-azure-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddb1ed4fc5691644616c46ab640b65a1795b01c150be473a82170f8a93e22caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3973 Malicious code in iss-azure-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddb1ed4fc5691644616c46ab640b65a1795b01c150be473a82170f8a93e22caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09155decce648bd9a7851f5dff6d5483e4044da7569e549990b84b7de8f566ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3232 Malicious code in frontend-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09155decce648bd9a7851f5dff6d5483e4044da7569e549990b84b7de8f566ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @exnessimo/style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61d6394b8b47eeb20d3269c543dbf0a4fda44c7c9ff7fcbb41bf507beba25d48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-258 Malicious code in @exnessimo/style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61d6394b8b47eeb20d3269c543dbf0a4fda44c7c9ff7fcbb41bf507beba25d48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-api-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257d088a2c56246e87ea0068e7e5ffa617d5f06a13dac71c7aca131ab34dcf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1234 Malicious code in azure-api-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257d088a2c56246e87ea0068e7e5ffa617d5f06a13dac71c7aca131ab34dcf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ruby-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89cf2431bf1e33c39071abae67176324ffcd08f4b09f2abacaac469dd4c41f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5861 Malicious code in ruby-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89cf2431bf1e33c39071abae67176324ffcd08f4b09f2abacaac469dd4c41f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-27221

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown strin...

CVE-2022-1814

The WP Admin Style WordPress plugin through 0.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2022-1814

The WP Admin Style WordPress plugin through 0.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2022-1814

The WP Admin Style WordPress plugin through 0.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

Cross site scripting

The WP Admin Style WordPress plugin through 0.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2022-1814 WP Admin Style <= 0.1.2 - Admin+ Stored Cross-Site Scripting

The WP Admin Style WordPress plugin through 0.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

CVE-2022-1814

The CVE-2022-1814 entry concerns the WordPress plugin WP Admin Style (versions up to 0.1.2). The root cause is failure to sanitize/escape certain plugin settings, which can allow stored XSS by high-privilege users (e.g., admins) when unfiltered_html is disallowed. Several sources (Red Hat, CNVD, ...