Buildbot Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the waterfall web status view status/web/waterfall.py in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

FreeBSD : Rails -- XSS vulnerabilities (9db93f3d-c725-11ec-9618-000d3ac47524)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9db93f3d-c725-11ec-9618-000d3ac47524 advisory. - A XSS Vulnerability in Action View tag helpers = 5.2.0 and = 5.2.0 and 5.2.0 that could allo...

Cross-site Scripting (XSS)

rails is vulnerable to Cross-site Scripting XSS. The library does not properly escape input data passed as hash keys for tag attributes in Action View tag helpers, allowing an attacker to inject and execute malicious javascript...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is a data integration software platform. Its primary service is to help us be able to understand, clean, monitor, transform and deliver data. an elevation of privilege vulnerability exists in IBM InfoSphere Information Server, which could be exploited by an...

CVE-2022-22441: Undefined Security Weakness

IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability. IBM X-Force ID: 224426...

XSS Vulnerability in Action View tag helpers

There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted input as hash keys can lead to a possible XSS vulnerability. This vulnerability has been assigned the CVE identifier CVE-2022-27777. Versions Affected: ALL Not affected: NONE Fixed Versions: 7.0.2.4, 6.1.5.1,...

GHSA-CH3H-J2VF-95PV XSS Vulnerability in Action View tag helpers

There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted input as hash keys can lead to a possible XSS vulnerability. This vulnerability has been assigned the CVE identifier CVE-2022-27777. Versions Affected: ALL Not affected: NONE Fixed Versions: 7.0.2.4, 6.1.5.1,...

spring-framework: RCE via Data Binding on JDK 9+

A flaw was found in Spring Framework, specifically within two modules called Spring MVC and Spring WebFlux, transitively affected from Spring Beans, using parameter data binding. This flaw allows an attacker to pass specially-constructed malicious requests to certain parameters and possibly gain...

PT-2022-3569 · Unknown +4 · Action View +4

Name of the Vulnerable Software and Affected Versions: Action View tag helpers versions prior to 5.2.7.1 Action View tag helpers versions prior to 6.0.4.8 Action View tag helpers versions prior to 6.1.5.1 Action View tag helpers versions prior to 7.0.2.4 Description: A XSS vulnerability exists in...

Possible XSS Vulnerability in Action View tag helpers

There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted input as hash keys can lead to a possible XSS vulnerability. This vulnerability has been assigned the CVE identifier CVE-2022-27777. Versions Affected: ALL Not affected: NONE Fixed Versions: 7.0.2.4, 6.1.5.1,...

CVE-2022-1459 Non-Privilege User Can View Patient’s Disclosures in openemr/openemr

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1459: Insufficient Documentation of Error Handling Techniques

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-29078: Improper Control of Generation of Code

The ejs aka Embedded JavaScript templates package 3.1.6 for Node.js allows server-side template injection in settingsview optionsoutputFunctionName. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbitrary OS command which is executed upon template...

OpenEMR 安全漏洞

OpenEMR is an open source medical management system from the Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in versions of OpenEMR prior to 6.1.0.1, which can...

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

Design/Logic Flaw

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

CVE-2022-29589

CVE-2022-29589 affects Crypt Server prior to version 3.3.0. The issue is an XSS in the index view related to serial, computername, and username fields. The underlying cause is not detailed in the provided documents beyond this linkage. Public references indicate the fix was released in version 3....