4477 matches found
ai.ylyue:yue-library-base (finchley.sr2.sr1), ai.ylyue:yue-library-data-jdbc (finchley.sr2.sr1) +4014 more potentially affected by CVE-2019-0199 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.5.37)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =1, =0.0.6, =0.0.7 and more Source cves: CVE-2019-0199 Source advisory: MEND:CVE-2019-0199...
CVE-2019-9736
DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...
CVE-2019-9738
jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...
CVE-2019-9736
DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...
PT-2019-19832
Name of the Vulnerable Software and Affected Versions jimmykuu Gopher version 2.0 Description The issue involves a DOM-based XSS that can be exploited through specific vectors, including the ' tag with SRC attributes containing data:image/svg+xml substrings until a patch is available. Restrict...
CVE-2018-6091
Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
CVE-2018-6091
Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
UBUNTU-CVE-2018-6091
Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
Design/Logic Flaw
Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
Embed Video Scripts - Persistent Cross-Site Scripting
Embed Video Scripts - Persistent Cross-Site Scripting Exploit Title: Embed Video Scripts - Cross-site Script stored Google Dork: N/A Date: 1 Jan 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me POC Video: https://youtu.be/2CFJLwkxpT8 Vendor...
Embed Video Scripts - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Embed Video Scripts - Cross-site Script stored Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me POC Video: https://youtu.be/2CFJLwkxpT8 Vendor Homepage: https://codeawesome.in/embed/...
Embed Video Scripts Cross Site Scripting
Exploit Title: Embed Video Scripts - Cross-site Script stored Google Dork: N/A Date: 1 Jan 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me POC Video: https://youtu.be/2CFJLwkxpT8 Vendor Homepage: https://codeawesome.in/embed/ Software Link:...
org.pidster:embed-apache-tomcat-core (>=0.1-alpha, <=0.2), org.pidster:embed-apache-tomcat-test (>=0.1-alpha, <=0.2) potentially affected by CVE-2014-0050 via org.apache.tomcat:tomcat (>=8.0.0-rc3, <=8.0.0-rc5)
org.apache.tomcat:tomcat MAVEN version =8.0.0-rc3, =0.1-alpha, =0.1-alpha, =0.2 Source cves: CVE-2014-0050 Source advisory: OSV:GHSA-XX68-JFCG-XMMF...
org.pidster:embed-apache-tomcat-core (>=0.1-alpha, <=0.2), org.pidster:embed-apache-tomcat-test (>=0.1-alpha, <=0.2) potentially affected by CVE-2014-0050 via org.apache.tomcat:tomcat (>=8.0.0-rc3, <=8.0.0-rc5)
org.apache.tomcat:tomcat MAVEN version =8.0.0-rc3, =0.1-alpha, =0.1-alpha, =0.2 Source cves: CVE-2014-0050 Source advisory: GHSA-XX68-JFCG-XMMF...
Valine HTML Injection
An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...
GHSA-HHRP-QM88-XJR3 Valine HTML Injection
An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...
Design/Logic Flaw
An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...
CVE-2018-19289
An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file...
