Malicious code in wt-fe-buz-utilities-url (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wt-fe-buz-business-stoplimit (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wt-fe-buz-utilities-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da59ce3066bc4f743fd62c3c5db000f13a21c5167bf5987991697d4b631b6288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1266 Malicious code in wt-fe-buz-utilities-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da59ce3066bc4f743fd62c3c5db000f13a21c5167bf5987991697d4b631b6288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

wt-textildruck.de Improper Access Control vulnerability OBB-3767953

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wt-pedevilla.at Cross Site Scripting vulnerability OBB-2859358

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-43824

A flaw was found in envoy. A crafted request can potentially trigger a NULL pointer dereference when using a WT filter saferegex match...

@levi-m/ide-kit (=10.1.0-beta.14), dltsign-mobile (=0.1.0) +6 more potentially affected by CVE-2018-19048 via simditor (>=2.1.14 <=2.3.21)

simditor NPM version =2.1.14, =2.0.2, =1.0.1, =2.0.4, =0.1.7, =1.1.24 Source cves: CVE-2018-19048 Source advisory: OSV:GHSA-8V67-X8Q5-3X3G...

Null pointer dereference

arm-wt-22k/libsrc/easmdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service NULL pointer dereference, and device hang or reboot via a crafted media file, aka internal bug 29770686...

Memory corruption

Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of samples, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file,...

Sql injection

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...

CVE-2010-1273

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...

CVE-2010-1274

Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...

CVE-2010-1273

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...

CVE-2010-1274

CVE-2010-1274 describes a cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1. The issue arises from vectors related to the insertion of the URL during redirection, allowing remote attackers to inject arbitrary web script or HTML. Affected product: Emweb Wt (web toolkit) prior to 3....

CVE-2010-1273

CVE-2010-1273 affects Emweb Wt prior to 3.1.1. The root cause is that UTF-8 encoding for (1) form values and (2) JSignal arguments is not validated. The provided sources describe the condition and impact as unspecified, with remote attack vectors implied but not detailed. No remediation or fixed ...

CVE-2010-1274

Cross-site scripting XSS vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to "insertions of the URL" that occur during a redirection...

Cross site scripting

Cross-site scripting XSS vulnerability in the WT Gallery aka wtgallery extension 2.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...