3521 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-39039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. CVE-2023-39039 Note that...
Linux Distros Unpatched Vulnerability : CVE-2019-12981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ming aka libming 0.4.8 has an fill overflow vulnerability in the function SWFShapesetLeftFillStyle in blocks/shape.c. CVE-2019-12981 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2011-1691
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets CSS implementation in WebCore in WebKit before r82222, as used i...
Description of the security update for SharePoint Server 2019 Language Pack: September 9, 2025 (KB5002774)
None None...
GHSA-QGJ5-4QVG-2F8C Liferay Portal is vulnerable to XSS attack through its Style Book theme
A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.17 allows a remote authenticated user to inject JavaScript code via Style Book theme name. This malicious payload is then reflected and executed within the user's browser...
Liferay Portal is vulnerable to XSS attack through its Style Book theme
A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.17 allows a remote authenticated user to inject JavaScript code via Style Book theme name. This malicious payload is then reflected and executed within the user's browser...
CVE-2025-43774
Rejected reason: This CVE ID is rejected. The reported vulnerability was found to be present only in a feature that was under development and protected by a beta feature flag. As a result, the issue was not exploitable in the official or public releases within the specified affected ranges, makin...
CVE-2025-43774
Connected sources describe a reflected XSS in Liferay Portal 7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.17, exploitable when a remote authenticated user injects JavaScript via the Style Book theme name. The issue is reflected in the user’s browser; no concrete fix/version is provided in the supp...
PT-2025-36537
Name of the Vulnerable Software and Affected Versions: Liferay Portal version 7.4.3.132 Liferay DXP versions 2025.Q1.0 through 2025.Q1.17 Description: A reflected cross-site scripting XSS vulnerability exists in Liferay Portal and DXP. A remote authenticated user can inject JavaScript code via th...
Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)
The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...
Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)
The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...
Malicious code in style-loader-optimize-css-assets-webpack-plugin-octans-ursa (npm)
The package style-loader-optimize-css-assets-webpack-plugin-octans-ursa was found to contain malicious code...
MAL-2025-44142 Malicious code in epimetheus-html-webpack-plugin-markdown-style-loader (npm)
The package epimetheus-html-webpack-plugin-markdown-style-loader was found to contain malicious code...
MAL-2025-43493 Malicious code in archaeometry-hercules-singularitarianism-style-loader (npm)
The package archaeometry-hercules-singularitarianism-style-loader was found to contain malicious code...
MAL-2025-46497 Malicious code in vega-areology-perseus-style-loader (npm)
The package vega-areology-perseus-style-loader was found to contain malicious code...
MAL-2025-46153 Malicious code in style-loader-troposphere-speleology-link (npm)
The package style-loader-troposphere-speleology-link was found to contain malicious code...