CVE-2022-34185: Improper Neutralization of Input During Web Page Generation

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34175: Undefined Security Weakness

Jenkins 2.335 through 2.355 both inclusive allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view...

CVE-2022-34182: Improper Neutralization of Input During Web Page Generation

Jenkins Nested View Plugin 1.20 through 1.25 both inclusive does not escape search parameters, resulting in a reflected cross-site scripting XSS vulnerability...

PT-2022-22050 · Jenkins · Jenkins Nested View Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Nested View Plugin versions 1.20 through 1.25 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This occurs because the plugin does not escape search parameters. No information is provided about...

Jenkins Plugin Nested View 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. An attacker could exploit this vulnerability to perform cross-site scripting...

CVE-2022-33048

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...

Sql injection

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...

CVE-2022-31373

SolarView Compact v6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component SolarAiConf.php...

Online Railway Reservation system SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerabilit...

Online Discussion Forum Site SQL注入漏洞（ CNVD-2022-58959 ）

Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum, Online Discussion Forum Site is vulnerable to a SQL injection vulnerability in /odfs/posts/viewpost.php that lacks validation of externally entered SQL statements. An attacker could use this vulnerabilit...

MAL-2022-6412 Malicious code in taf-three-dimensional-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3019ee1a4da6ba81d0721c4cccfd580bc1f3a9f6aeba72ec8270c591dbfc6a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3724 Malicious code in huobi-trading-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d29ecae36ab585836b991b6bbef49b053752417c2479bc2f7b6d086b2217b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huobi-trading-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d29ecae36ab585836b991b6bbef49b053752417c2479bc2f7b6d086b2217b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huobi-trading-view-swap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4131800be5001915a56dd3db46bfe0a0b883eaa15801e0160afa68fc41fe30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3725 Malicious code in huobi-trading-view-swap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4131800be5001915a56dd3db46bfe0a0b883eaa15801e0160afa68fc41fe30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitui-view-hovercards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec3479905c08bdd96b7f18218ceaaa3497f5b942ecb0a9f9ab4fa9eab70b0f78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4638 Malicious code in mitui-view-place-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fade7c58dade085bba212f5caf4d294dc880df390dfe3fa69b9515426d8836c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4636 Malicious code in mitui-view-hovercards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec3479905c08bdd96b7f18218ceaaa3497f5b942ecb0a9f9ab4fa9eab70b0f78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitui-view-place-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fade7c58dade085bba212f5caf4d294dc880df390dfe3fa69b9515426d8836c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitui-view-jiveid-migration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd908dae737957b13007e6080479f8a54890d3b5f563a72ffcac0a706048a830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...