Cross-site Scripting (XSS)

Overview dash-html-components is a Vanilla HTML components for Dash. Affected versions of this package are vulnerable to Cross-site Scripting XSS when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this vulnerability could steal the...

com.alibaba.rsocket:alibaba-broker-server (1.0.1), com.beirtipol:jfixtools-reporting (1.0-beta) +110 more potentially affected by unknown CVE via com.vaadin:flow-server (>=3.0.0, <=6.0.5)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =6.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C57F-4VP2-JQHM...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +107 more potentially affected by CVE-2021-31404 via com.vaadin:flow-server (>=3.0.0, <=5.0.2)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.0.0, =5.0.2 and more Source cves: CVE-2021-31404 Source advisory: MEND:CVE-2021-31404...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +101 more potentially affected by CVE-2020-36321 via com.vaadin:flow-server (>=3.0.0, <=4.0.8)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.0.8 and more Source cves: CVE-2020-36321 Source advisory: MEND:CVE-2020-36321...

com.faendir.vaadin:jfreechart-flow (1.1.6), com.github.mcollovati.vertx:vaadin-flow-sockjs (0.2.0) +89 more potentially affected by CVE-2018-25007 via com.vaadin:flow-server (>=1.0.0, <=1.0.5)

com.vaadin:flow-server MAVEN version =1.0.0, =0.2.0, =0.5.0, =1.0.0.alpha1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.5 and more Source cves: CVE-2018-25007 Source advisory: OSV:GHSA-JMX8-355M-8VWH...

com.faendir.vaadin:jfreechart-flow (1.1.6), com.github.mcollovati.vertx:vaadin-flow-sockjs (0.2.0) +93 more potentially affected by CVE-2019-25027 via com.vaadin:flow-server (>=1.0.0, <=1.0.10)

com.vaadin:flow-server MAVEN version =1.0.0, =0.2.0, =0.5.0, =1.0.0, =1.0.0.alpha1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.10 and more Source cves: CVE-2019-25027 Source advisory: GHSA-RP4X-WXQV-CF9M...

com.vaadin:flow (>=3.0.0, <=3.0.5), com.vaadin:flow-client (>=3.0.0, <=3.0.5) +87 more potentially affected by CVE-2020-36319 via com.vaadin:flow-server (>=3.0.0, <=3.0.5)

com.vaadin:flow-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =15.0.0, =15.0.4 - com.vaadin:vaadin-accordion-flow 3.0.0 - com.vaadin:vaadin-accordion-flow-demo 3.0.0 and more Source cves: CVE-2020-36319 Source advisory: OSV:GHSA-RJWW-2X8V-M9V...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +101 more potentially affected by CVE-2020-36321 via com.vaadin:flow-server (>=3.0.0, <=4.0.8)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.0.8 and more Source cves: CVE-2020-36321 Source advisory: GHSA-49R2-73M6-PP8F...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +107 more potentially affected by CVE-2021-31404 via com.vaadin:flow-server (>=3.0.0, <=5.0.2)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.0.0, =5.0.2 and more Source cves: CVE-2021-31404 Source advisory: OSV:GHSA-XWG3-QRCG-W9X6...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +107 more potentially affected by CVE-2021-31404 via com.vaadin:flow-server (>=3.0.0, <=5.0.2)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.0.0, =5.0.2 and more Source cves: CVE-2021-31404 Source advisory: GHSA-XWG3-QRCG-W9X6...

com.vaadin:flow (6.0.0), com.vaadin:flow-client (6.0.0) +95 more potentially affected by CVE-2021-31407 via com.vaadin:flow-server (6.0.0)

com.vaadin:flow-server MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 6.0.0 - com.vaadin:flow-client 6.0.0 - com.vaadin:flow-component-demo-helpers 6.0.0 -...

com.vaadin:flow (6.0.0), com.vaadin:flow-client (6.0.0) +95 more potentially affected by CVE-2021-31406 via com.vaadin:flow-server (6.0.0)

com.vaadin:flow-server MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 6.0.0 - com.vaadin:flow-client 6.0.0 - com.vaadin:flow-component-demo-helpers 6.0.0 -...

PT-2009-4932 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1, 7, and 8 Description: The issue arises from improper argument validation for unspecified variables, allowing remote attackers to execute arbitrary code via a crafted HTML document. This...