CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

CVE-2021-23996

CVE-2021-23996 affects Mozilla Firefox prior to 88.0, where a flaw in rendering with 3D CSS and JavaScript could cause content to appear outside the viewport, enabling spoofing potentially for phishing. Multiple connected advisories (Arch Linux ASA-202104-3, Alpine, CNVD/CNNVD entries, Kaspersky,...

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

CVE-2021-23996: Undefined Security Weakness

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

CVE-2021-24357

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue...

CVE-2021-24357

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue...

CVE-2021-24357 FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scripting

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue...

CVE-2021-24357: Improper Neutralization of Input During Web Page Generation

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue...

PT-2021-15893

Name of the Vulnerable Software and Affected Versions FooGallery WordPress plugin versions prior to 2.0.35 Description The issue arises from the Custom CSS field of each gallery not being properly sanitised or validated before being output in the page where the gallery is embedded, leading to a...

minify:parse-css-token: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5465987431399424 Project: minify Fuzzing Engine: libFuzzer Fuzz Target: parse-css-token Job Type: libfuzzerasanminify Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002430000 Crash State: NULL Sanitizer: address ASAN Recommended...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2020:14584-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14584-1 advisory. - Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from...

clean-css Uncontrolled Resource Consumption DoS

The vulnerability of the clean-css application software of Aurora Center relates to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially crafted regular expression...

GHSA-Q8PJ-2VQX-8GGC Denial of service in css-what

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

Denial of service in css-what

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

5ug-cli (>=1.0.72, <=1.4.0), @11ty/eleventy-plugin-syntaxhighlight (>=3.1.0, <=3.1.1) +166 more potentially affected by CVE-2021-33587 via css-what (4.0.0)

css-what NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on css-what and may be impacted: - 5ug-cli =1.0.72, =3.1.0, =0.0.1, =0.4.0-next.8, =0.4.0-next.8, =0.4.0-next.8, =2.8.1-canary.0, =2.7.6, =2.8.0-canary.5, =1.0.0-alpha.0, =1.0.0,...

5ug-cli (>=1.0.72, <=1.4.0), @11ty/eleventy-plugin-syntaxhighlight (>=3.1.0, <=3.1.1) +166 more potentially affected by CVE-2021-33587 via css-what (4.0.0)

css-what NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on css-what and may be impacted: - 5ug-cli =1.0.72, =3.1.0, =0.0.1, =0.4.0-next.8, =0.4.0-next.8, =0.4.0-next.8, =2.8.1-canary.0, =2.7.6, =2.8.0-canary.5, =1.0.0-alpha.0, =1.0.0,...

Debian: Security Advisory (DLA-2678-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wget2:libwget_css_url_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5961382498533376 Project: wget2 Fuzzing Engine: libFuzzer Fuzz Target: libwgetcssurlfuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x4f7b3099dee6 Crash State: NULL Sanitizer: address ASAN Recommend...