15 matches found
CVE-2026-16728 vulnerabilities
Vulnerabilities for packages: vitess, code-server, prism, langfuse, npm, pulumi...
CVE-2026-16728 vulnerabilities
Vulnerabilities for packages: npm, langfuse, code-server, kibana, actions-runner, prism, langfuse-fips, renovate, pulumi, vitess, pelias-api...
CVE-2026-16728
creationtimestamp| type| source ---|---|--- 2026-07-29 21:02:32+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrst4zfho22c 2026-08-04 12:01:00+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msaxocasct2i 2026-08-04 14:32:21+00:00| seen|...
CVE-2019-16728
creationtimestamp| type| source ---|---|--- 2026-07-07 14:02:53+00:00| seen| https://gist.github.com/UltraRamy/b344c7471b63468d9b5bc7bd3f33c59c...
CVE-2019-16728
DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...
CVE-2020-16728
CVE-2020-16728 is rejected/not used and does not represent an active vulnerability entry.
[SECURITY] [DLA 2419-1] dompurify.js security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2419-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2020 https://wiki.debian.org/LTS -...
@5lions/library-registry-admin (=0.0.0), @adobe/helix-cli (>=3.0.0 <=5.2.0) +358 more potentially affected by CVE-2019-16728 via dompurify (>=0.6.6 <=2.0.2)
dompurify NPM version =0.6.6, =3.0.0, =2.2.0, =1.0.1, =0.6.0, =0.1.0, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.7.3-dev, =0.15.0, =0.7.3-dev, =0.7.3-dev, =0.7.8 - @atom-ide-community/nuclide-watchman-helpers =0.7.3-dev and more Source cves: CVE-2019-16728 Source advisory:...
Exploit for Path Traversal in Nazgul Nostromo_Nhttpd
CVE-2019-16728-PoC CVE-201...
CVE-2019-16728
Summary: CVE-2019-16728 affects DOMPurify prior to 2.0.1, enabling cross-site scripting via innerHTML mutation XSS (mXSS) in SVG or MATH elements, demonstrated in Chrome and Safari. Affected component: DOMPurify (HTML, MathML, SVG sanitization code). Root cause: improper handling of innerHTML mut...
CVE-2017-16728
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the program to use an invalid memory address, resulting in a program crash...
CVE-2017-16728
CVE-2017-16728 concerns Advantech WebAccess before 8.3, where an untrusted pointer dereference in the webvrpcs/drawsrv components can cause invalid memory dereference. Public sources describe potential crashes and, in ZDI advisories, remote code execution scenarios without authentication via IOCT...
Advantech WebAccess
CVSS v3 8.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech Equipment: WebAccess Vulnerabilities: Untrusted Pointer Dereference, Stack-based Buffer Overflow, Path Traversal, SQL Injection, Improper Input Validation. AFFECTED PRODUCTS Advantech reports that the...
Advantech WebAccess (Update A)
CVSS v3 8.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech Equipment: WebAccess Vulnerabilities: Untrusted Pointer Dereference, Stack-based Buffer Overflow, Path Traversal, SQL Injection, Improper Input Validation. UPDATE INFORMATION This updated advisory is a...