8220 matches found
Intel® NUC Laptop Kit Advisory
Summary: Potential security vulnerabilities in some Intel® NUC Laptop Kits may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-28858 Description: Improper buffer restriction in the firmware for...
Cross-site Scripting (XSS)
Overview sanitize is a Ruby HTML and CSS sanitizer. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insufficient neutralization of style element content. Using carefully crafted input, an attacker may be able to sneak arbitrary HTML and CSS when the library is...
Format string
Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be triggered by providing a specially crafte...
CVE-2023-35936
Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be triggered by providing a specially crafte...
UBUNTU-CVE-2023-37204
A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115...
CVE-2023-37204
A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115...
CVE-2023-37204: Undefined Security Weakness
A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115...
openSUSE 15 Security Update : xmltooling (SUSE-SU-2023:2766-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2766-1 advisory. - CVE-2023-36661: Fixed a server-side-request-forgery SSRF vulnerability bsc1212359. Tenable has extracted the preceding description block directly from the...
Joplin Cross-site Scripting vulnerability
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-37298
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
CVE-2023-37299: Improper Neutralization of Input During Web Page Generation
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-37299
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
PT-2023-4625 · Joplin · Joplin
Name of the Vulnerable Software and Affected Versions: Joplin versions prior to 2.11.5 Description: The issue is related to an AREA element of an image map, which allows for a cross-site scripting XSS attack. This can be exploited by a remote attacker to conduct an XSS attack. The vulnerability i...
CVE-2023-37298: Improper Neutralization of Input During Web Page Generation
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
Joplin cross-site scripting vulnerabilities
Joplin is an open source notes and to-do list application. A security vulnerability exists in Joplin versions prior to 2.11.5, which stems from a cross-site scripting XSS attack allowed via the USE element in SVG documents...
CVE-2023-37298
Joplin before 2.11.5 allows XSS via a USE element in an SVG document...
xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow
A flaw was found in the xstream package. This flaw allows an attacker to cause a denial of service by injecting recursive collections or maps, raising a stack overflow...
GHSA-257Q-PV89-V3XV Duplicate Advisory: jQuery Cross Site Scripting vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jpcq-cgw6-v4j6. This link is maintained to preserve external references. Original Description Cross Site Scripting vulnerability in jQuery v.2.2.0 until v.3.5.0 allows a remote attacker to execute arbitrary code...
Duplicate Advisory: jQuery Cross Site Scripting vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jpcq-cgw6-v4j6. This link is maintained to preserve external references. Original Description Cross Site Scripting vulnerability in jQuery v.2.2.0 until v.3.5.0 allows a remote attacker to execute arbitrary code...