Lucene search
+L

231 matches found

Vulnrichment
Vulnrichment
•added 2020/02/11 8:35 a.m.•12 views

CVE-2020-5529

HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is...

7.6AI score0.04719EPSS
SaveExploits0References5
Mend
Mend
•added 2020/02/11 8:35 a.m.•3 views

CVE-2020-5529

HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is...

9.2CVSS0.04719EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2020/02/11 8:35 a.m.•82 views

CVE-2020-5529

HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is...

8.2AI score0.04719EPSS
SaveExploits0References5
CVE
CVE
•added 2020/02/11 8:35 a.m.•178 views

CVE-2020-5529

CVE-2020-5529 affects HtmlUnit prior to 2.37.0, where improper Rhino engine initialization enables a malicious JavaScript to execute arbitrary Java code within the application. The issue also extends to Android environments where Android-specific Rhino initialization is mishandled, allowing simil...

8.1CVSS8.1AI score0.04719EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/11 12:00 a.m.•4 views

CVE-2020-5529: Improper Initialization

HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is...

8.1CVSS7.4AI score0.04719EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/02/11 12:00 a.m.•6 views

PT-2020-18504 · Htmlunit +1 · Htmlunit +1

Name of the Vulnerable Software and Affected Versions: HtmlUnit versions prior to 2.37.0 Description: The issue is related to improper initialization of the Rhino engine in HtmlUnit, allowing malicious JavaScript code to execute arbitrary Java code on the application. This problem also affects...

8.1CVSS8AI score0.04719EPSS
SaveExploits0References27
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/02/10 3:30 a.m.•14 views

HtmlUnit vulenerable to arbitrary code execution

Overview HtmlUnit is a Java-based library which provides web browser functionality to Java programs, and it supports JavaScript evaluation with embedded Mozilla Rhino engine. Mozilla Rhino engine offers a feature to make Java objects available from JavaScript. HtmlUnit initializes Rhino engine...

8.1CVSS7AI score0.04719EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/02/10 12:00 a.m.•108 views

JVN#34535327: HtmlUnit vulenerable to arbitrary code execution

HtmlUnit is a Java-based library which provides web browser functionality to Java programs, and it supports JavaScript evaluation with embedded Mozilla Rhino engine. Mozilla Rhino engine offers a feature to make Java objects available from JavaScript. HtmlUnit initializes Rhino engine improperly,...

8.1CVSS8AI score0.04719EPSS
SaveExploits0
CNVD
CNVD
•added 2020/02/10 12:00 a.m.•12 views

HtmlUnit Code Execution Vulnerability

HtmlUnit is a Java-based library . A code execution vulnerability exists in HtmlUnit that can be exploited by an attacker to execute arbitrary Java code...

8.1CVSS8.1AI score0.04719EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2018/10/04 8:29 p.m.•2 views

com.github.seykron:htmlunit-runner-freemarker (1.0), org.springframework:spring-mock (2.0) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0)

org.springframework:spring-webmvc MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.seykron:htmlunit-runner-freemarker 1.0 - org.springframework:spring-mock 2.0 -...

7.5CVSS0.05748EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2017/09/27 4:00 p.m.•1 views

com.canoo:webtest (>=586, <=1393), com.flexiblewebsolutions.xdriveunit:xdriveunit (0.3) +79 more potentially affected by CVE-2017-12621 via commons-jelly:commons-jelly (>=1.0-beta-4, <=1.0)

commons-jelly:commons-jelly MAVEN version =1.0-beta-4, =586, =0.1, =1.0, =20050708.205531, =1.2, =1.0-m5, =1.0.1, =1.3, =1.9 - jepi:jepi 1.0 - marmalade:marmalade-compat-jelly 1.0-alpha-3 - maven-plugins:maven-sourceforge-plugin 1.3 and more Source cves: CVE-2017-12621 Source advisory:...

9.8CVSS0.0813EPSS
SaveExploits3
Rows per page
Query Builder