26 matches found
CVE-2018-16802
An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix...
CVE-2017-16802
In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added...
CVE-2017-16802
In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added...
CVE-2017-16802
The CVE concerns MISP version 2.4.82 where the function shared ingGroupPopulateOrganisations in app/webroot/js/misp.js is vulnerable to cross-site scripting (XSS). A remote attacker can inject arbitrary script via a specially crafted organisation name added to the list, exposing users to client-s...
wangpansou.cn XSS vulnerability
Vulnerable URL: http://www.wangpansou.cn/?wp=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16802 Google...