Lucene search
+L

5322 matches found

Github Security Blog
Github Security Blog
•added 2019/08/27 5:39 p.m.•29 views

Cross-site Scripting in django-js-reverse

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

6.1CVSS3.2AI score0.01043EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2019/08/27 5:39 p.m.•63 views

GHSA-VX6V-2RG6-865H Cross-site Scripting in django-js-reverse

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

6.1CVSS5.9AI score0.01043EPSS
SaveExploits0References8
OSV
OSV
•added 2019/08/27 12:15 p.m.•12 views

CVE-2018-21002

The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...

8.8CVSS5.8AI score0.00681EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/27 12:15 p.m.•28 views

CVE-2018-21002

The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...

8.8CVSS8.8AI score0.00681EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/27 12:15 p.m.•24 views

Cross site request forgery (csrf)

The js-support-ticket plugin before 2.0.6 for WordPress has CSRF...

6.8CVSS8.7AI score0.00681EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/08/27 11:24 a.m.•70 views

CVE-2018-21002

The CVE-2018-21002 entry affects the WordPress plugin js-support-ticket prior to version 2.0.6, which is vulnerable to Cross-Site Request Forgery (CSRF). The issue is caused by CSRF in the plugin’s handling of requests, enabling unintended state-changing actions on affected sites. NVD lists CVSS ...

8.8CVSS8.7AI score0.00681EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/08/27 12:00 a.m.•14 views

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and the Node.js software platform. This allows attackers to induce service failures.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting...

7.8CVSS7.2AI score0.82813EPSS
SaveExploits0References16Affected Software9
CNVD
CNVD
•added 2019/08/27 12:00 a.m.•16 views

django-js-reverse cross-site scripting vulnerability

django-js-reverse is a Django application for handling URL naming. A cross-site scripting vulnerability exists in versions prior to django-js-reverse 0.9.1, which can be exploited by an attacker to execute client-side code...

6.1CVSS6.3AI score0.01043EPSS
SaveExploits0References1
Veracode
Veracode
•added 2019/08/26 8:17 a.m.•26 views

Cross-site Scripting (XSS)

django-js-reverse is vulnerable to cross-site scripting XSS. The attack is possible because it does not escape the entities via jsreverseinline...

6.1CVSS2.5AI score0.01043EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2019/08/23 1:15 p.m.•20 views

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

6.1CVSS6.1AI score
SaveExploits0References2
OSV
OSV
•added 2019/08/23 1:15 p.m.•18 views

PYSEC-2019-89

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

3.7AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/08/23 1:15 p.m.•29 views

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

6.1CVSS6.3AI score0.01043EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/23 1:15 p.m.•20 views

Design/Logic Flaw

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

4.3CVSS5.9AI score0.01043EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2019/08/23 12:31 p.m.•45 views

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

6.1CVSS6AI score0.01043EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/08/23 12:31 p.m.•30 views

CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

6AI score0.01043EPSS
SaveExploits0References2
CVE
CVE
•added 2019/08/23 12:31 p.m.•91 views

CVE-2019-15486

The CVE-2019-15486 entry affects django-js-reverse (Django JS Reverse) versions prior to 0.9.1. The vulnerability is an XSS flaw exploitable via js_reverse_inline, as stated across multiple sources in the provided documents. The root cause is exposed by the description “before 0.9.1 has XSS via j...

6.1CVSS5.8AI score0.01043EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2019/08/22 8:15 p.m.•22 views

CVE-2015-9340

The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files...

7.5CVSS7.7AI score0.01389EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/08/22 7:02 p.m.•24 views

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

7.7AI score0.01389EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/08/22 12:00 a.m.•13 views

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, nginx servers, network programming tools like netty, Envoy, SwiftNIO, and Node.js software platforms. This allows attackers to induce service failures.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, nginx servers, network programming tools like Netty, Envoy, SwiftNIO, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a maliciou...

7.8CVSS5.5AI score0.25448EPSS
SaveExploits0References10Affected Software6
CNVD
CNVD
•added 2019/08/20 12:00 a.m.•16 views

WordPress js-jobs plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. js-jobs is a recruitment/job search plugin used in it. WordPress js-jobs plugin has a cross-site request forgery vulnerability. Th...

8.8CVSS6.8AI score0.00649EPSS
SaveExploits0References1
Rows per page
Query Builder