CVE-2022-34253 Adobe Commerce XML Injection Arbitrary code execution

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android 13 suffers from a security vulnerability that stems from a lack of permission checking in AppWidgets, which could potentially allow an activity to be launched from the background,...

PT-2022-4896 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.3-p2 and earlier Adobe Commerce versions 2.3.7-p3 and earlier Adobe Commerce versions 2.4.4 and earlier Description: The issue is related to errors in processing XML requests, which can allow a remote attacker to...

Fedora: Security Advisory for python-notebook (FEDORA-2022-85aa8e5706)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: python-notebook-6.4.0-4.fc35

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

[SECURITY] Fedora 36 Update: python-notebook-6.4.11-3.fc36

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

MAL-2022-5546 Malicious code in qiwi-widgets-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5918b2e5d3410ab7cb968a3b16aef1baba54bbccdea5db15edf8b8ea63f0229f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qiwi-widgets-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5918b2e5d3410ab7cb968a3b16aef1baba54bbccdea5db15edf8b8ea63f0229f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5738 Malicious code in relap-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8872e580af7f46dda42c551780140c1f22a16413c6995b881e33f68a5596b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in relap-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8872e580af7f46dda42c551780140c1f22a16413c6995b881e33f68a5596b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youtrack-reports-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b732af593b170277e15300a0a934c0b107bb8df0e470062ced5f8076aeef0e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7367 Malicious code in youtrack-reports-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b732af593b170277e15300a0a934c0b107bb8df0e470062ced5f8076aeef0e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ringcentral-js-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40a945280fbb86a94c48945655c54a4c0e8a086449b740490e8167ac97f1de67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5807 Malicious code in ringcentral-js-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40a945280fbb86a94c48945655c54a4c0e8a086449b740490e8167ac97f1de67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7146 Malicious code in widgets-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc0d7136253d49aca8073d2094c4733e7491db9517189c6c7606c6a6ee7c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in widgets-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc0d7136253d49aca8073d2094c4733e7491db9517189c6c7606c6a6ee7c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

aiidalab-widgets-base (>=1.3.4 <=2.0.0a1), appyter (>=0.18.3 <=0.18.11) +50 more potentially affected by CVE-2022-29241 via jupyter-server (>=0.0.5 <=1.16.0)

jupyter-server PYPI version =0.0.5, =1.3.4, =0.18.3, =0.0.0, =0.1.0rc1, =0.0.1.post7, =0.1.2, =1.2.0, =0.0.0, =0.0.1.dev7, =0.1.7, =0.1.1.10, =0.1.6.2, =0.3.0, =0.6.0 and more Source cves: CVE-2022-29241 Source advisory: OSV:PYSEC-2022-211...

Design/Logic Flaw

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...

Tuleap 安全漏洞

Tuleap is open source an application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. A security vulnerability exists in versions prior to Tuleap 13.7.99.239 that stems from Tuleap failing to...

CVE-2022-24896 Tracker report renderer and chart widgets leak information in Tuleap

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...