653 matches found
CVE-2017-12064: Improper Encoding or Escaping of Output
The csvloghtml function in library/edihistory/edihcsvinc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name...
CVE-2016-3063: Improper Encoding or Escaping of Output
Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors...
Vulnerability of WebLogic Server software, allowing a remote attacker to compromise protected information
The vulnerability exists in Oracle Mojarra due to incorrect encoding when using the tag or EL-expressions after a script or style block. Exploiting this vulnerability allows malicious individuals to perform cross-site scripting attacks XSS remotely...
The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the Messages component in the Mac OS X operating system exists due to improper handling of the file encoding. Exploiting this vulnerability can allow a remote attacker to obtain confidential information...
TYPO3 Multiple Cross-Site Scripting Vulnerabilities (Jan 2016)
TYPO3 is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...
PT-2015-5728
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.4 Description The cache handler in MyBB does not properly check the encoding of input to the var export function, allowing attackers to have an unspecified impact via unknown vectors. Recommendations For versions pri...
CVE-2013-5855
Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a 1 tag or 2 EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting XSS attacks via application-specific vectors...
PT-2014-4125
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Description The issue allows remote attackers to spoof the address bar via a crafted web site, due to improper encoding of domain names in URLs...
CVE-2013-4547: Improper Encoding or Escaping of Output
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI...
Improper Handling of Alternate Encoding
Overview Affected versions of this package are vulnerable to Improper Handling of Alternate Encoding via boost::locale::utf::utftraits in the /boost/locale/utf.hpp, which does not properly detect certain invalid UTF-8 sequences. A remote attacker can bypass input validation protection mechanisms...
RHEL 4 : glibc (RHSA-2012:0125)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0125 advisory. - glibc: tzfileread integer overflow to buffer overflow CVE-2009-5029 - glibc: ldd unexpected code execution issue CVE-2009-5064 - glibc:...
