3433 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-4971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding proper...
IBM EntireX Denial of Service Vulnerability
IBM EntireX is a cross-platform middleware developed by IBM for high-performance data communication and transaction processing between heterogeneous systems. A denial of service vulnerability exists in IBM EntireX regular expressions, which is caused by a complexity flaw in the regular expression...
Linux Distros Unpatched Vulnerability : CVE-2014-9654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Regular Expressions package in International Components for Unicode ICU for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculate...
Linux Distros Unpatched Vulnerability : CVE-2011-1944
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause ...
Insufficient Control Flow Management
Vyper is vulnerable to Insufficient Control Flow Management. The vulnerability is due to improper handling of iterator expressions in for loops due to the ability of iterators to consume side effects produced in the loop body, potentially leading to unexpected program behavior...
IBM EntireX security vulnerabilities
IBM EntireX is a cross-platform middleware developed by IBM for high-performance data communication and transaction processing between heterogeneous systems. A denial of service vulnerability exists in IBM EntireX regular expressions, which is caused by a complexity flaw in the regular expression...
DOM Expressions has a Cross-Site Scripting (XSS) vulnerability due to improper use of string.replace
!NOTE This advisory was originally emailed to [email protected] by @nsysean. To sum it up, the use of javascript's .replace opens up to potential XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from solid-meta are...
@lume/element (>=0.1.2, <=0.5.6), @lume/variable (>=0.1.1, <=0.6.1) +9 more potentially affected by CVE-2025-27108 via dom-expressions (>=0.6.0, <=0.36.18)
dom-expressions NPM version =0.6.0, =0.1.2, =0.1.1, =0.20.0, =0.4.2, =0.2.2, =0.2.0, =0.2.1, =0.3.0, =0.4.5, =0.5.1 - webfps 1.4.0 Source cves: CVE-2025-27108 Source advisory: GHSA-HW62-58PR-7WC5...
@lume/element (>=0.1.2, <=0.5.6), @lume/variable (>=0.1.1, <=0.6.1) +9 more potentially affected by CVE-2025-27108 via dom-expressions (>=0.6.0, <=0.36.18)
dom-expressions NPM version =0.6.0, =0.1.2, =0.1.1, =0.20.0, =0.4.2, =0.2.2, =0.2.0, =0.2.1, =0.3.0, =0.4.5, =0.5.1 - webfps 1.4.0 Source cves: CVE-2025-27108 Source advisory: OSV:GHSA-HW62-58PR-7WC5...
CVE-2025-27108
dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's .replace opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from...
CVE-2025-27108
dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's .replace opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from...
CVE-2025-27108 Cross-site Scripting vulnerability due to improper use of string.replace in dom-expressions
dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's .replace opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from...
CVE-2025-27108 Cross-site Scripting vulnerability due to improper use of string.replace in dom-expressions
dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's .replace opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from...
@lume/element (>=0.1.2, <=0.5.6), @lume/variable (>=0.1.1, <=0.6.1) +9 more potentially affected by CVE-2025-27108 via dom-expressions (>=0.6.0, <=0.36.18)
dom-expressions NPM version =0.6.0, =0.1.2, =0.1.1, =0.20.0, =0.4.2, =0.2.2, =0.2.0, =0.2.1, =0.3.0, =0.4.5, =0.5.1 - webfps 1.4.0 Source cves: CVE-2025-27108 Source advisory: MEND:CVE-2025-27108...
CVE-2025-27108
dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's ".replace" opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with "$". Particularly, when the attributes of "Meta" tag...
CVE-2025-27108
CVE-2025-27108 affects dom-expressions. The vulnerability arises from using JavaScript String.replace with special replacement patterns (notably $' and $�60) when injecting assets into HTML headers via solid-meta, where user-controlled attributes (Meta tags) can be manipulated to achieve XSS. Thi...
CVE-2025-27108 Cross-site Scripting vulnerability due to improper use of string.replace in dom-expressions
dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's .replace opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from...
CVE-2025-27108: Improper Neutralization of Input During Web Page Generation
dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's .replace opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from...
PT-2025-7633 · Unknown · Dom-Expressions
Name of the Vulnerable Software and Affected Versions: dom-expressions versions prior to 0.39.5 Description: The issue arises from the use of JavaScript's .replace function, which opens up to potential Cross-site Scripting XSS vulnerabilities with special replacement patterns beginning with $...