Cross Site Scripting

rails-html-sanitizer, is vulnerable to Cross-Site Scripting. The vulnerability is due to improper handling of certain HTML5 elements when the sanitizer's allowed tags include "math", "mtext", "table", "style", and either "mglyph" or "malignmark." Attackers can exploit this by injecting malicious...

CVE-2013-0095: Exposure of Sensitive Information to an Unauthorized Actor

Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebK...