5086 matches found
Symfony UX Autocomplete Input Validation Error Vulnerability
Symfony UX Autocomplete is a Symfony open source JavaScript autocomplete feature for Symfony. An input validation error vulnerability exists in Symfony UX Autocomplete versions prior to 2.11.2. An attacker can exploit this vulnerability to successfully submit an invalid entity ID...
PT-2023-27912 · Symfony · Symfony/Ux-Autocomplete
Name of the Vulnerable Software and Affected Versions: symfony/ux-autocomplete versions prior to 2.11.2 Description: The issue allows an attacker to submit an entity id for an EntityType that is not part of the valid choices under certain circumstances. This can occur in applications that use a...
CVE-2023-41336: Improper Input Validation
ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an EntityType that is not part of the valid choices. The problem has been fixed in symfony/ux-autocomplete version 2.11.2...
Malicious code in ux-authentication-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acc992350d87b94d42d60618d28b4f1111d7b55add45c9262f23033782743741 The OpenSSF Package Analysis project identified 'ux-authentication-auth0' @ 1.0.2 npm as malicious. It is considered malicious because: - The...
CVE-2023-28994
Unauth. Reflected Cross-Site Scripting XSS vulnerability in UX-themes Flatsome plugin = 3.16.8 versions...
CVE-2023-28994 WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in UX-themes Flatsome plugin = 3.16.8 versions...
CVE-2023-28994: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in UX-themes Flatsome plugin = 3.16.8 versions...
Take Care of Orphan APIs with Wallarm
The Wallarm API Discovery module has been further enhanced to enable customers to identify Orphan APIs and bring them under management. In this post we’ll discuss what Orphan APIs are, why they matter, and how to regain control of your API portfolio. What Are Orphan APIs? Orphan APIs are endpoint...
HPESBUX04528 rev.1 - HP-UX PHP, Multiple Vulnerabilities
Potential Security Impact: Local: Access Restriction Bypass, Bypass Security Restrictions, Denial of Service DoS, Disclosure of Sensitive Information, memory corruption; Remote: Access Restriction Bypass, Bypass Security Restrictions, Code Execution, Denial of Service DoS, Disclosure of Sensitive...
Malicious code in ux-logging-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 649b80a17f0912d20e34627fb9fcb9ee23f7e5dcbe67f9082d4499956d68f3a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-931 Malicious code in ux-translation-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a1c7fc5ab29649fa65f5fbebcceb914ec5132e7c0a46b38a656b508274a5098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in ux-translation-tools
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in ux-logging-proxy
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in ux-translation-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a1c7fc5ab29649fa65f5fbebcceb914ec5132e7c0a46b38a656b508274a5098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: A vulnerability in IBM GSKit affects IBM Storage Protect Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management (CVE-2023-32342)
Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for Hyper-V and Data Protection for VMware, and IBM Storage Protect for Space Management can be affected by a vulnerability in IBM GSKit. The vulnerability can lead to disclosure of...
MAL-2023-1286 Malicious code in salesforce-ux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf2a69a3613a2fc56dfb5d3eb3f2b0289bf2f9c8b0db94caf8d754699c12d175 The OpenSSF Package Analysis project identified 'salesforce-ux' @ 1.6.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in salesforce-ux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf2a69a3613a2fc56dfb5d3eb3f2b0289bf2f9c8b0db94caf8d754699c12d175 The OpenSSF Package Analysis project identified 'salesforce-ux' @ 1.6.1 npm as malicious. It is considered malicious because: - The package...
CVE-2023-30903
HP-UX could be exploited locally to create a Denial of Service DoS when any physical interface is configured with IPv6/inet6...
