7 matches found
CVE-2016-10006
creationtimestamp| type| source ---|---|--- 2025-08-20 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwud77izd22t...
Linux Distros Unpatched Vulnerability : CVE-2016-10006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input a tag that supports style with active content, you could bypass the library protections...
Update the bundled version of OWASP AntiSamy to address issues
The bundled version of OWASP AntiSamy in Crucible before version 4.7.1 was vulnerable to CVE-2017-14735 https://nvd.nist.gov/vuln/detail/CVE-2017-14735 and CVE-2016-10006 https://nvd.nist.gov/vuln/detail/CVE-2016-10006...
Update the bundled version of OWASP AntiSamy to address issues
The bundled version of OWASP AntiSamy in Fisheye before version 4.7.1 was vulnerable to CVE-2017-14735 https://nvd.nist.gov/vuln/detail/CVE-2017-14735 and CVE-2016-10006 https://nvd.nist.gov/vuln/detail/CVE-2016-10006...
cn.acooly:acooly-auth-wechat-authenticator (=5.2.1), co.pishfa.accelerate:accelerate-core (>=1.0.0 <=1.0.15) +425 more potentially affected by CVE-2016-10006 via org.owasp.antisamy:antisamy (>=1.4.3 <=1.5.3)
org.owasp.antisamy:antisamy MAVEN version =1.4.3, =1.0.0, =1.0.0, =1.0.1 - co.pishfa.accelerate:accelerate-service =1.0.0 - com.acooly:acooly-component-account =5.2.1 - com.acooly:acooly-component-app =5.2.1 - com.acooly:acooly-component-assetmgmt =5.2.1 - com.acooly:acooly-component-certificatio...
CVE-2016-10006
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input a tag that supports style with active content, you could bypass the library protections and supply executable code. The impact is XSS...
CVE-2016-10006
CVE-2016-10006 affects the HTML/CSS sanitizer library in OWASP AntiSamy prior to version 1.5.5. A specially crafted input (a tag that supports style with active content) could bypass protections and cause executable code to be executed in the context of affected applications, yielding a Cross‑Sit...