8422 matches found
PYSEC-2019-199
A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDGCONFIGDIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in...
CVE-2019-12761
A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDGCONFIGDIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in...
Information Disclosure
firefox/thunderbird is vulnerable to information disclosure. Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method...
PT-2019-6393
Name of the Vulnerable Software and Affected Versions Tor Browser versions prior to 8.5.4 Description The issue allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for ...
Cross site scripting
XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...
CVE-2019-12313
XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...
CVE-2019-12313
XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...
CVE-2019-12313: Improper Neutralization of Input During Web Page Generation
XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...
phpBB: CSS injection via BB code tag "█████"
The input to the "█████" BBcode tag is not properly filtered. It gets converted into a CSS style attribute for a span HTML element. Quotes " are removed, so there's no way to break out of the CSS style attributed. However it is possible to arbitrarily dress the resulting span element. To illustra...
CVE-2018-7840: Uncontrolled Search Path Element
A Uncontrolled Search Path Element CWE-427 vulnerability exists in VideoXpert OpsCenter versions prior to 3.1 which could allow an attacker to cause the system to call an incorrect DLL...
CVE-2019-12173
MacDown 0.7.1 870 allows remote code execution via a file:\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138...
CVE-2019-12172
Typora 0.9.9.21.1 1913 allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\ on macOS or Linux, or file://C| on Windows. This is different from CVE-2019-12137...
CVE-2019-12172
Typora 0.9.9.21.1 1913 allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\ on macOS or Linux, or file://C| on Windows. This is different from CVE-2019-12137...
Code injection
Typora 0.9.9.21.1 1913 allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\ on macOS or Linux, or file://C| on Windows. This is different from CVE-2019-12137...
CVE-2019-12173: Improper Limitation of a Pathname to a Restricted Directory
MacDown 0.7.1 870 allows remote code execution via a file:\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138...
CVE-2019-12172: Improper Limitation of a Pathname to a Restricted Directory
Typora 0.9.9.21.1 1913 allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\ on macOS or Linux, or file://C| on Windows. This is different from CVE-2019-12137...
PT-2019-12678
Name of the Vulnerable Software and Affected Versions Typora version 0.9.9.21.1 Description The issue allows for arbitrary code execution through a modified file: URL syntax in the HREF attribute of an AREA element. This can be achieved using specific file paths, such as file: on macOS or Linux, ...
PT-2019-12679
Name of the Vulnerable Software and Affected Versions MacDown version 0.7.1 Description The issue allows remote code execution via a file: URI with a .app pathname in the HREF attribute of an A element. Recommendations For MacDown version 0.7.1, update to a newer version that contains a fix for...