10208 matches found
SUSE CVE-2020-3864
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin...
SUSE CVE-2020-11022
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...
SUSE CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...
SUSE CVE-2021-29975
Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain with the new domain correctly shown in the address bar resulting in possible user confusion. This vulnerability affects Firefox ...
Stored DOM-based Cross-site Scripting in Tags Functionality
Description A stored, DOM-based cross-site scripting vulnerability exists in answer version 1.0.4 within the question tagging functionality. Steps Step 1. Log in. Step 2. Proceed to create a new question. Populate the Title and Body input. Step 3. Click on the Add tag button, shown in the followi...
CVE-2023-0741
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0741
CVE-2023-0741 : Cross-site Scripting (XSS) via DOM in the GitHub repository answerdev/answer prior to version 1.0.4 . Root cause is a DOM-based XSS vulnerability in the client-side code, enabling attacker-controlled script execution within a user session. The vulnerability is described as affecti...
CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
TD Bank: Reflected XSS on Admin Login Page
When you try to access private pages on the domain https://td.intelliresponse.com/a6 you are redirected to a login page, which has reflected values in the DOM from the URL on the parameter 'win'. Once there is no proper handle for the data reflected, it turns out into a vulnerable path on the...
GHSA-PJ97-R83V-VJ7F Microweber contains Cross-site Scripting
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
Microweber contains Cross-site Scripting
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2023-0608
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2023-0608
Microweber (microweber/microweber) before version 1.3.2 is affected by a DOM-based Cross-site Scripting (XSS) vulnerability. The issue enables malicious scripts to run in the victim’s browser. Remedy: upgrade to 1.3.2 or later (as documented in connected advisories).