8571 matches found
PT-2019-15774
Name of the Vulnerable Software and Affected Versions CSS Hero plugin versions prior to 4.0.4 Description The issue is related to reflected XSS via the URI in a csshero action=edit page request. It occurs because the plugin fails to sufficiently sanitize user-supplied input, allowing an attacker ...
WordPress CSS Hero 4.0.3 Cross Site Scripting
Team, Document Title =============== CVE-2019-19133 Reflected XSS in CSS Hero = v.4.0.3 WordPress plugin. Product Description =============== CSS Hero WordPress Plugin A live WordPress Theme editor that works without modifying any of your theme files. Very low performance footprint: only generate...
WordPress CSS Hero plugin <= 4.03 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated Reflected Cross-Site Scripting XSS vulnerability found by Cary Hooper in WordPress CSS Hero plugin versions = 4.03. Solution Update the WordPress CSS Hero plugin to the latest available version at least 4.07...
EulerOS 2.0 SP2 : libcroco (EulerOS-SA-2019-2520)
According to the versions of the libcroco package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crtknzrparsecomment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service memory allocation error...
PT-2019-4864
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 68.4 Firefox versions prior to 72 Description The issue arises when pasting a tag from the clipboard into a rich text editor, causing the CSS sanitizer to incorrectly rewrite a @namespace rule. This could lead to...
KLA11611 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Incorrectly image loading...
Denial Of Service (DoS) Through Infinite Loop
css-element-queries is vulnerable to denial of service DoS attacks. If an element is added to DOM and removed from DOM very quickly even before the first reset happens, the requestAnimationFrame of reset itself will get stuck in an infinite loop leading to denial of service conditions and memory...
CSS Hero < 4.07 - Authenticated Reflected XSS
The css-hero WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability...
EulerOS 2.0 SP8 : libcroco (EulerOS-SA-2019-2284)
According to the versions of the libcroco package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crtknzrparsecomment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service memory allocation error...
DEBIAN-CVE-2019-13714
Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL...
CVE-2019-13714
Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL...
UBUNTU-CVE-2019-13714
Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL...
CVE-2019-13714
Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL...
Input validation
Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL...
Chaturbate: Camo Image Proxy Bypass with CSS Escape Sequences
Summary With CSS escape sequences it is possible to bypass CSS url detection and filtering. Details Users can use HTML tags in their Profile Bio in About Me and Wish List fields. Among other filtering and sanitization, image URLs are replaced by URLs on internal image proxy. For example, this...
CVE-2019-13714
Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL...
CVE-2019-13714
Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL...
CVE-2019-13714
The CVE-2019-13714 entry concerns Google Chrome before 78.0.3904.70, where insufficient validation of untrusted input in the Color Enhancer extension can allow CSS injection into an HTML page via a crafted URL. Affected product: Google Chrome (earlier than 78.0.3904.70). Root cause/impact: CSS in...
CVE-2019-13714: Improper Control of Generation of Code
Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL...
htmlcssjs.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1014053 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...