51 matches found
SUSE-SU-2023:3701-1 Security update for go1.21
This update for go1.21 fixes the following issues: Update to go1.21.1 bsc1212475. - CVE-2023-39318: Fixed improper handling of HTML-like comments within script contexts in html/template bsc1215084. - CVE-2023-39319: Fixed improper handling of special tags within script contexts in html/template...
SUSE-SU-2023:3700-1 Security update for go1.20
This update for go1.20 fixes the following issues: Update to go1.20.8 bsc1206346. - CVE-2023-39318: Fixed improper handling of HTML-like comments within script contexts in html/template bsc1215084. - CVE-2023-39319: Fixed improper handling of special tags within script contexts in html/template...
USN-5796-2 w3m vulnerability
USN-5796-1 fixed a vulnerability in w3m. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that w3m incorrectly handled certain HTML files. A remote attacker could use this issue to cause w3m to crash, resulting in a denial of service...
USN-5235-1 ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled certain HTML files. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. CVE-2021-41816 It was discovered that Ruby incorrectly handled certain regular expressions. An...
Denial of service in third-party component in Vaadin 7 and 8
Improper check for exceptional condition in a third party HTML handling library used in com.vaadin:vaadin-server versions 7.0.0 through 7.7.27 Vaadin 7.0.0 through 7.7.27 and 8.0.0 through 8.13.3 Vaadin 8.0.0 through Vaadin 8.13.3 allows network attackers to cause denial of service via unspecifie...
ROS-2-2178
2.2178 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...
PT-2022-2265
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 91.8 Firefox ESR versions prior to 91.8 Description The issue is related to a use-after-free error that occurs after a VR Process is destroyed, potentially leading to a crash. This error can be exploited by a remo...
Mozilla Firefox 缓冲区错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from a buffer error vulnerability that originates from a boundary error when processing HTML content. An attacker could exploit this vulnerability to create a specially crafted web page, trick a...
USN-4666-2 lxml vulnerability
USN-4666-1 partially fixed a vulnerability in lxml, but an additional patch was needed. This update provides the corresponding additional patch in order to properly fix the vulnerability. Original advisory details: It was discovered that lxml incorrectly handled certain HTML. An attacker could...
USN-4666-1 lxml vulnerability
It was discovered that lxml incorrectly handled certain HTML. An attacker could possibly use this issue to cross-site scripting XSS attacks...
UBUNTU-CVE-2019-18860
Squid before 4.9, when certain web browsers are used, mishandles HTML in the host aka hostname parameter to cachemgr.cgi...
CVE-2019-18860
Squid before 4.9, when certain web browsers are used, mishandles HTML in the host aka hostname parameter to cachemgr.cgi...
CVE-2013-4101
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...
Hardcoded credentials
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...
CVE-2013-4101
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...
CVE-2013-4101
Cryptocat (versions before 2.0.22) is affected by CVE-2013-4101 due to a Link Markup Decorator HTML Handling Weakness. The vulnerability enables the generation of invalid HTML code within the application’s markup processing. Red Hat and CNVD entries corroborate the same affected version range and...
PT-2021-5413
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12.5.4 Description A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue...
PT-2019-6921
Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.22 Description The issue is related to weak handling of HTML in the Link Markup Decorator. Recommendations For versions prior to 2.0.22, update to version 2.0.22 or later to resolve the issue...
