CVE-2017-6514

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information Path Disclosure via a /wp-json/oembed/1.0/embed?url= request, related to the "authorname":" substring...

CVE-2017-6514: Exposure of Sensitive Information to an Unauthorized Actor

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information Path Disclosure via a /wp-json/oembed/1.0/embed?url= request, related to the "authorname":" substring...

Fedora 30 : php-twig (2019-874015ee38)

Version 1.38.2 2019-03-12 - added TemplateWrapper::getTemplateName ---- Version 1.38.1 2019-03-12 - fixed class aliases ---- Version 1.38.0 2019-03-12 - fixed sandbox security issue under some circumstances, calling the toString method on an object was possible even if not allowed by the security...

Moderate severity vulnerability that affects org.apache.tomcat.embed:tomcat-embed-core

Withdrawn: Duplicate of GHSA-qcxh-w3j9-58qr...

GHSA-R53M-PFR5-7V87 Moderate severity vulnerability that affects org.apache.tomcat.embed:tomcat-embed-core

Withdrawn: Duplicate of GHSA-qcxh-w3j9-58qr...

ai.ylyue:yue-library-base (finchley.sr2.sr1), ai.ylyue:yue-library-data-jdbc (finchley.sr2.sr1) +4013 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.37)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =0.0.6, =0.0.7 and more Source cves: CVE-2019-0199 Source advisory: MEND:CVE-2019-0199...

am.ik.servicebroker:cloud-karafka-service-broker (0.1.0), ca.pjer:iam-spring-boot-starter (>=1.0.0, <=1.5.2) +900 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.14)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =1.0.0, =0.0.31, =0.0.31, =0.0.31, =0.0.31, =0.1.32, =0.1.31, =0.1.31, =0.1.31, =2.0.10, =2.0.11 and more Source cves: CVE-2019-0199 Source advisory: MEND:CVE-2019-0199...

CVE-2019-9738

jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...

CVE-2019-9736

DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...

CVE-2019-9736

DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...

PT-2019-19832

Name of the Vulnerable Software and Affected Versions jimmykuu Gopher version 2.0 Description The issue involves a DOM-based XSS that can be exploited through specific vectors, including the ' tag with SRC attributes containing data:image/svg+xml substrings until a patch is available. Restrict...

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

UBUNTU-CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Design/Logic Flaw

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Embed Video Scripts - Persistent Cross-Site Scripting

Embed Video Scripts - Persistent Cross-Site Scripting Exploit Title: Embed Video Scripts - Cross-site Script stored Google Dork: N/A Date: 1 Jan 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me POC Video: https://youtu.be/2CFJLwkxpT8 Vendor...

Embed Video Scripts - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Embed Video Scripts - Cross-site Script stored Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me POC Video: https://youtu.be/2CFJLwkxpT8 Vendor Homepage: https://codeawesome.in/embed/...

Embed Video Scripts Cross Site Scripting

Exploit Title: Embed Video Scripts - Cross-site Script stored Google Dork: N/A Date: 1 Jan 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me POC Video: https://youtu.be/2CFJLwkxpT8 Vendor Homepage: https://codeawesome.in/embed/ Software Link:...

org.pidster:embed-apache-tomcat-core (>=0.1-alpha, <=0.2), org.pidster:embed-apache-tomcat-test (>=0.1-alpha, <=0.2) potentially affected by CVE-2014-0050 via org.apache.tomcat:tomcat (>=8.0.0-rc3, <=8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version =8.0.0-rc3, =0.1-alpha, =0.1-alpha, =0.2 Source cves: CVE-2014-0050 Source advisory: OSV:GHSA-XX68-JFCG-XMMF...

org.pidster:embed-apache-tomcat-core (>=0.1-alpha, <=0.2), org.pidster:embed-apache-tomcat-test (>=0.1-alpha, <=0.2) potentially affected by CVE-2014-0050 via org.apache.tomcat:tomcat (>=8.0.0-rc3, <=8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version =8.0.0-rc3, =0.1-alpha, =0.1-alpha, =0.2 Source cves: CVE-2014-0050 Source advisory: GHSA-XX68-JFCG-XMMF...