CVE-1999-0537

A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc...

CVE-2024-36361

Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the compileClient, compileFileClient, or compileClientWithDependenciesTracked function. NOTE: these functions are for compiling Pug templates into JavaScript, and there would...

CVE-2023-28403

This CVE ID has been rejected by its CNA as unused and does not represent an active vulnerability entry.

Security Update for Microsoft Visual Studio Team Foundation Server 2013 (KB2903566)

This security update resolves a privately reported vulnerability in TFS 2013 web access. The vulnerability could allow java script to be executed on a vulnerable browser if an attacker sends a specially crafted message...