1059 matches found
PT-2018-3260
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue is related to the incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing via IDN homographs using a crafted...
PT-2018-3266
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue exists due to insufficient input validation in the URL Formatter component of Google Chrome. This allows a remote attacker to perform domain spoofing via specially crafted doma...
PT-2018-3261
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue arises from incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing via IDN homographs using a crafted domain...
PT-2018-3291
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue concerns the incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing via IDN homographs. This can be achieved by...
PT-2018-3267
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue is related to the incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing via IDN homographs using a crafted...
PT-2018-3269
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue concerns incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing via IDN homographs using a crafted domain name...
chromium-browser: URL spoof in Omnibox
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
DEBIAN-CVE-2017-16137
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
UBUNTU-CVE-2017-16137
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
CVE-2017-16137
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
CVE-2017-16137
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
CVE-2017-16137
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
PT-2018-3672
Name of the Vulnerable Software and Affected Versions debug versions prior to 2.6.9 debug versions 3.2.0 through 3.2.6 debug versions 4.0.0 through 4.3.0 Description The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. Th...
CVE-2017-16137: Uncontrolled Resource Consumption
The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue...
Cross-site Scripting (XSS)
cucumber is vulnerable to cross-site scripting XSS attacks. The HTML formatter appends any scenario output without sanitization, allowing a malicious user to inject and execute arbitrary HTML code...
CVE-2018-6133
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
PT-2018-3246
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 67.0.3396.62 Description The issue is related to incorrect handling of data, specifically confusable characters in the URL Formatter. This can allow a remote attacker to perform domain spoofing via IDN homograph...
DRUPAL-CONTRIB-2018-027
This module adds a new formatter for the file fields, which allows any file extension to be uploaded. The module doesn't sufficiently handle sanitization under the scenario uploaded SVG files. This vulnerability is mitigated by the fact that an attacker must have a role with the permission create...
SVG Formatter - Critical - Cross Site Scripting - SA-CONTRIB-2018-027
This module adds a new formatter for the file fields, which allows any file extension to be uploaded. The module doesn't sufficiently handle sanitization under the scenario uploaded SVG files. This vulnerability is mitigated by the fact that an attacker must have a role with the permission create...
php: Stack based buffer overflow in msgfmt_format_message
ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...