CVE-2022-24836

CVE-2022-24836 affects Nokogiri, a Ruby HTML/XML parser. The issue is an inefficient regular expression used to detect encoding in HTML documents in versions = 1.13.4 (or applicable patches) as noted in multiple sources (Debian/Alpine/Amazon/DLA advisories and vendor notices). If upgrade is not p...

CVE-2021-39199

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...

The vulnerability of the automatic shielding function in the Django HTML library for the Python programming language, allowing attackers to perform cross-site scripting attacks

The vulnerability of the automatic shielding function in the Django HTML library for the Python programming language is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution

Heap-based buffer overflow vulnerability in extractstatuscode function in lib/html.c that parses HTTP status code returned from web server allows malicious web server or man-in-the-middle attacker pretending to be a web server to cause either a denial of service or potentially execute arbitrary...

The vulnerability of the extract_status_code function in the Keepalived network traffic balancing system, which allows a attacker to cause a service failure

The vulnerability of the extractstatuscode function in the keepalived network traffic balancing system’s lib/html.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Ubuntu Update for kdelibs vulnerability USN-420-1

Ubuntu Update for Linux kernel vulnerabilities USN-420-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4201.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for kdelibs vulnerability USN-420-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

konqueror XSS

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

Cross site scripting

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2007-0537

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

CVE-2004-1312

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to...

CVE-2004-1312

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to...

CVE-1999-0967

CVE-1999-0967 describes a buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. The connected PT-1997-1176 entry reiterates a buffer overflow in the HTML library with affected software and recommends updating to ...

CVE-1999-0967

Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol...

CVE-1999-0967

Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol...

PT-1997-1176 · Microsoft · Outlook Express +2

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Outlook Express affected versions not specified Windows Explorer affected versions not specified Description: A buffer overflow issue exists in the HTML library used by the affected software v...