Lucene search
+L

1657 matches found

UbuntuCve
UbuntuCve
•added 2019/11/16 1:15 a.m.•28 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.3AI score0.02327EPSS
SaveExploits0References2
Prion
Prion
•added 2019/11/16 1:15 a.m.•23 views

Sql injection

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

7.5CVSS10AI score0.02327EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2019/11/16 1:15 a.m.•46 views

PYSEC-2019-102

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7AI score0.02327EPSS
SaveExploits0References6
CVE
CVE
•added 2019/11/16 12:52 a.m.•145 views

CVE-2019-19010

CVE-2019-19010 affects Limnoria (Limnoria/Math plugin) and Supybot, where eval injection in the Math plugin allows remote unauthenticated attackers to disclose information and potentially other impact via the calc and icalc commands. Affected versions include Limnoria before 2019.11.09 and Supybo...

9.8CVSS9.9AI score0.02327EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2019/11/16 12:52 a.m.•40 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

10AI score0.02327EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2019/11/16 12:52 a.m.•93 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS10AI score0.02327EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/16 12:00 a.m.•3 views

CVE-2019-19010: Improper Control of Generation of Code

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS8.2AI score0.02327EPSS
SaveExploits0References2
Rockylinux
Rockylinux
•added 2019/11/05 5:56 p.m.•22 views

perl-Math-BigInt bug fix and enhancement update

An update is available for perl-Math-BigInt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2019/11/05 5:56 p.m.•26 views

perl-Math-BigInt bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

1.6AI score
SaveExploits0References1
OSV
OSV
•added 2019/11/05 5:56 p.m.•20 views

ALBA-2019:3529 perl-Math-BigInt bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
nodejs
nodejs
•added 2019/10/04 7:21 p.m.•43 views

Cross-Site Scripting

Overview Versions of dompurify prior to 2.0.3 are vulnerable to Cross-Site Scripting XSS. The package has an XSS filter bypass due to Mutation XSS in both Chrome and Safari through a combination of / elements and /. An example payload is: ". This allows attackers to bypass the XSS protection and...

4.3CVSS3.7AI score0.0167EPSS
SaveExploits2Affected Software1
OSV
OSV
•added 2019/09/24 5:15 a.m.•32 views

CVE-2019-16728

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...

6.1CVSS5.9AI score
SaveExploits0References2
NVD
NVD
•added 2019/09/24 5:15 a.m.•23 views

CVE-2019-16728

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...

6.1CVSS6.3AI score0.0167EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2019/09/24 5:15 a.m.•44 views

CVE-2019-16728

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...

6.1CVSS6.3AI score0.0167EPSS
SaveExploits2References2
Prion
Prion
•added 2019/09/24 5:15 a.m.•25 views

Cross site scripting

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...

4.3CVSS6.2AI score0.0167EPSS
SaveExploits2References2Affected Software2
OSV
OSV
•added 2019/09/24 5:15 a.m.•13 views

UBUNTU-CVE-2019-16728

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...

6.1CVSS6.4AI score0.0167EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2019/09/24 4:02 a.m.•39 views

CVE-2019-16728

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...

6.2AI score0.0167EPSS
SaveExploits2References2
Debian CVE
Debian CVE
•added 2019/09/24 4:02 a.m.•68 views

CVE-2019-16728

Removed by vendor...

6.1CVSS6.2AI score0.0167EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/24 12:00 a.m.•3 views

CVE-2019-16728: Improper Neutralization of Input During Web Page Generation

DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS mXSS for an SVG element or a MATH element, as demonstrated by Chrome and Safari...

6.1CVSS6.4AI score0.0167EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2019/08/29 12:00 a.m.•49 views

WordPress Rank Math SEO Plugin <= 1.0.27 Authentication Bypass Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rankmath:seo"; ifdescription...

6.5CVSS6.5AI score0.01381EPSS
SaveExploits2References3
Rows per page
Query Builder