CVE-2022-26870

CVE-2022-26870 affects Dell PowerStore 2.1.0.x. A remote unauthenticated attacker could exploit an authentication bypass to gain unauthorized access, per Dell/NVD entries. The issue is tied to the PowerStore T OS authentication handling under specific configurations, with impact stated as comprom...

GHSA-5325-XW5M-PHM3 Cross-site Scripting in ammonia

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870...

Cross-site Scripting in ammonia

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870...

CVE-2021-38193

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870...

Design/Logic Flaw

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870...

CVE-2021-26870

Windows Projected File System Elevation of Privilege Vulnerability...

CVE-2021-26870

CVE-2021-26870 : Windows Projected File System Elevation of Privilege vulnerability. The CVE is documented as a local, low-privilege escalation with high impact on confidentiality, integrity, and availability (per CVSS v3.1: 7.8, HIGH; LOCAL, PR:L, UI:N). The Connected documents do not provide ex...

KB5000822: Windows 10 Version 1809 and Windows Server 2019 March 2021 Security Update

The remote Windows host is missing security update 5000822. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24095, CVE-2021-26860, CVE-2021-26862,...

KB5000808: Windows 10 Version 1909 March 2021 Security Update

The remote Windows host is missing security update 5000808. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24090, CVE-2021-24095, CVE-2021-26860,...

KB5000809: Windows 10 Version 1803 March 2021 Security Update

The remote Windows host is missing security update 5000809. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24107, CVE-2021-26869, CVE-2021-26884 - An memory...

@adobe/helix-pipeline (>=6.2.3, <=11.2.3), @adpt/testutils (>=0.0.2-next.4, <=0.4.0-next.28) +70 more potentially affected by CVE-2020-26870 via dompurify (>=2.0.0, <=2.0.15)

dompurify NPM version =2.0.0, =6.2.3, =0.0.2-next.4, =1.0.0, =1.8.0-alpha.4373, =1.8.0-alpha.4373, =1.8.0-alpha.4373, =0.8.0-alpha.4373, =2.3.11, =1.12.1-7.alpha.1, =4.11.1-rc.8, =0.0.1, =5.0.0-m.6, =1.9.1, =2.0.31, =0.11.15, =0.12.2 and more Source cves: CVE-2020-26870 Source advisory:...

[SECURITY] [DLA 2419-1] dompurify.js security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2419-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2020 https://wiki.debian.org/LTS -...

Design/Logic Flaw

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML even though HTML support is not one of...

CVE-2020-26870

creationtimestamp| type| source ---|---|--- 2020-10-07 20:29:20+00:00| seen| https://t.me/cibsecurity/15118 2020-10-16 12:42:03+00:00| seen| https://t.me/cibsecurity/15311 2024-02-10 09:41:20+00:00| seen| https://t.me/ctinow/182501...

CVE-2020-26870

CVE-2020-26870 affects DOMPurify up to 2.0.16/2.0.17, where a serialize-parse roundtrip can alter the DOM (namespace changes HTML→MathML, e.g., nesting FORM elements), enabling a mutation XSS. The issue is documented by Cure53 and linked analyses; a fix was released with DOMPurify 2.0.17. Related...