Results
10,650 of 25,043· Page 202/213There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_clas
Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInst
Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_protot
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.
Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.
Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack
IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to pro
A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in reg
Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.
Cross Site Scripting (XSS) vulnerability exists in index.html in AFI WebACMS through 2.1.0 via the the ID parameter.
Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS
Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.
Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows a
In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on D
Cross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6
Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.
In mblog <= 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF loa
mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag
log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the f
Cross-site Scripting (XSS) - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0.
mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSR
A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8. via the add function in the operation tab list in
Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerabl
Istio is an open platform to connect, manage, and secure microservices. In Istio 1.12.0 and 1.12.1 The authorization pol
PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter
Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion discovered in Email
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix fi
As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" t
Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An a
Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.
A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows au
IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remo
There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS <= v2. By entering specific statements into t
An issue was discovered in Delta RM 1.2. It is possible for an unprivileged user to access the same information as an ad
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Eng
Test your stack for 2022issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.