Lucene search
+L

8402 matches found

Citrix
Citrix
•added 2021/06/29 12:00 a.m.•23 views

Error: Element Not Found on launching. ica file with Citrix Workspace app (from Microsoft Store)

Note: This issue applies to, Citrix Workspace app Microsoft store. Launching a virtual app or desktop using .ica file with Citrix Workspace app for Windows Microsoft store version leads to “Element not found” Error...

7.1AI score
SaveExploits0
osv_cve
osv_cve
•added 2021/06/24 3:15 p.m.•23 views

CVE-2021-23398

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS6.4AI score0.01341EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/06/24 3:00 p.m.•48 views

CVE-2021-23398 Cross-site Scripting (XSS)

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS6.2AI score0.01341EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/06/24 2:55 p.m.•13 views

CVE-2021-23398

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS5.3AI score0.01341EPSS
SaveExploits1References5
NVD
NVD
•added 2021/06/24 2:15 p.m.•26 views

CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

4.3CVSS0.0076EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/06/24 2:15 p.m.•14 views

CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

4.3CVSS6.4AI score0.0076EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/06/24 1:15 p.m.•52 views

CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

5.7AI score0.0076EPSS
SaveExploits0References3
CVE
CVE
•added 2021/06/24 1:15 p.m.•185 views

CVE-2021-29961

CVE-2021-29961 affects Mozilla Firefox (pre-89 releases). The issue is a content spoofing vulnerability where styling/rendering an oversized element failed to clip correctly, enabling an attacker to paint over the user interface. Root cause: incorrect clipping during rendering of oversized selec...

4.3CVSS5.2AI score0.0076EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2021/06/24 1:15 p.m.•11 views

CVE-2021-29961

When styling and rendering an oversized "" element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

5.3CVSS0.0076EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2021/06/24 1:15 p.m.•83 views

CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

4.3CVSS5.5AI score0.0076EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/24 12:00 a.m.•8 views

CVE-2021-29961: Incorrect Authorization

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

4.3CVSS5.8AI score0.0076EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/24 12:00 a.m.•24 views

react-bootstrap-table cross-site scripting vulnerabilities

react-bootstrap-table is a package. It is a Bootstrap table built using React.js. A cross-site scripting vulnerability exists in package react-bootstrap-table, which stems from an issue that is triggered when an invalid React element is returned, resulting in the use of dangerous setinnerhtml,...

6.1CVSS5.9AI score0.01341EPSS
SaveExploits1References5
CNVD
CNVD
•added 2021/06/09 12:00 a.m.•31 views

Logic Flaw Vulnerability in NM3000 Network Element Management System

DDPV is a wholly owned subsidiary of DigitalVision Group, specializing in the research and development, production, marketing and service of coaxial broadband access technology and optical communication technology. A logic flaw vulnerability exists in the NM3000 network element management system,...

6.7AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/06/08 8:12 p.m.•88 views

SQL Injection in t3/dce

The dce aka Dynamic Content Element extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account...

4.9CVSS5.3AI score0.01406EPSS
SaveExploits3References7Affected Software1
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•7 views

PT-2021-5602

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application installer version 2.4 and earlier Description The issue is related to an Uncontrolled Search Path Element. An unauthenticated attacker could leverage this to achieve arbitrary code execution in the...

9.3CVSS0.02689EPSS
SaveExploits0References5
Intel
Intel
•added 2021/06/08 12:00 a.m.•57 views

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities for some Intel® NUCs may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0067 Description: Improper access control in system firmware for some IntelR...

6.7CVSS7.1AI score0.00245EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/07 12:00 a.m.•49 views

Advantech iView getAllActiveTraps SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getAllActiveTraps action of NetworkServlet, which listens on TCP port 8080 b...

7.5CVSS2.8AI score0.01179EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2021/06/04 7:09 p.m.•47 views

GHSA-GG96-F8WR-P89F Script injection

Impact A malicious internal actor can potentially upload documentation content with malicious scripts by embedding the script within an object element. This may give access to sensitive data when other users visit that same documentation page. The ability to upload malicious content may be limite...

6.8CVSS7.1AI score0.01209EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/06/03 6:15 p.m.•30 views

CVE-2021-32661

Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin @backstage/plugin-techdocs prior to 0.9.5, a malicious internal actor can potentially upload documentation content with malicious scripts by embedding the script within an object element. This...

7.3CVSS7.2AI score0.01209EPSS
SaveExploits0References3
NVD
NVD
•added 2021/06/03 6:15 p.m.•33 views

CVE-2021-32661

Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin @backstage/plugin-techdocs prior to 0.9.5, a malicious internal actor can potentially upload documentation content with malicious scripts by embedding the script within an object element. This...

7.3CVSS0.01209EPSS
SaveExploits0References3
Rows per page
Query Builder