CVE-2021-37596

Telegram Web K Alpha 0.6.1 allows XSS via a document name...

CVE-2021-37596

Telegram Web K Alpha 0.6.1 allows XSS via a document name...

Cross site scripting

Telegram Web K Alpha 0.6.1 allows XSS via a document name...

CVE-2021-37596

Telegram Web K Alpha 0.6.1 allows XSS via a document name...

CVE-2021-37596

Telegram Web K Alpha 0.6.1 allows XSS via a document name...

CVE-2021-37596

CVE-2021-37596 affects Telegram Web K Alpha 0.6.1. A cross-site scripting vulnerability arises because the application allows XSS to pass through document names, with potential for client-side code execution. Connected sources corroborate the issue; however, no remediation steps or patch versions...

CVE-2021-37596: Improper Neutralization of Input During Web Page Generation

Telegram Web K Alpha 0.6.1 allows XSS via a document name...

PT-2021-21728

Name of the Vulnerable Software and Affected Versions Telegram Web K Alpha version 0.6.1 Description The issue allows for cross-site scripting XSS via a document name. Recommendations For Telegram Web K Alpha version 0.6.1, update to a version that fixes this issue, as using a vulnerable version...

PT-2020-10446 · Wso2 · Wso2 Api Manager

Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 Description: A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter. Recommendations: F...

CVE-2010-4677

emWEB on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service daemon crash via a request for a document whose name contains space characters, aka Bug ID CSCsy08416...

CVE-2010-0465: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field...

tiff2pdf buffer overflow

Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...