Lucene search
+L

709 matches found

RedHat Linux
RedHat Linux
added 2020/01/14 6:46 p.m.19 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01988EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/01/13 2:52 p.m.11 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01988EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/01/13 2:52 p.m.11 views

Mozilla: CSS sanitization does not escape HTML tags

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS7.3AI score0.01988EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/01/13 2:27 p.m.7 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01988EPSS
SaveExploits0References5
OSV
OSV
added 2020/01/08 10:15 p.m.5 views

DEBIAN-CVE-2019-17016

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.1AI score0.01988EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/08 10:15 p.m.5 views

DEBIAN-CVE-2019-17022

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS6.9AI score0.01988EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/08 10:15 p.m.7 views

UBUNTU-CVE-2019-17016

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01988EPSS
SaveExploits0References11
Imperva Blog
Imperva Blog
added 2019/12/04 12:19 p.m.66 views

Adding Some Salt to Our Network – Part 1

Why configuration management system was a must for our network, and how we chose SaltStack When we planned and designed the network automation at Imperva Cloud, we split our automation systems into three different systems, where each of the systems has a different set of requirements: 1...

SaveExploits0
Prion
Prion
added 2019/11/14 2:15 a.m.27 views

Format string

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error...

6.8CVSS7AI score0.01074EPSS
SaveExploits0References6Affected Software3
UbuntuCve
UbuntuCve
added 2019/11/14 2:15 a.m.41 views

CVE-2011-1588

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error...

7.8CVSS7.1AI score0.01074EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2019/11/14 1:51 a.m.62 views

CVE-2011-1588

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error...

7.8CVSS7.5AI score0.01074EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2019/10/08 12:00 a.m.151 views

Security update for putty (moderate)

openSUSE Security Update: Security update for putty Announcement ID: openSUSE-SU-2019:2292-1 Rating: moderate References: 1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that fixes two vulnerabilities is...

7.5CVSS7.9AI score0.02248EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/01 5:15 p.m.26 views

CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

7.5CVSS6.6AI score
SaveExploits0References5
OSV
OSV
added 2019/10/01 5:15 p.m.5 views

ALPINE-CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

7.5CVSS6.9AI score0.01806EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/01 5:15 p.m.1 views

DEBIAN-CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

7.5CVSS7.7AI score0.01806EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/01 5:15 p.m.26 views

CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

7.5CVSS7.4AI score0.01806EPSS
SaveExploits0References5
OSV
OSV
added 2019/10/01 5:15 p.m.16 views

UBUNTU-CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

7.5CVSS5.8AI score0.01806EPSS
SaveExploits0References3
Prion
Prion
added 2019/10/01 5:15 p.m.23 views

Design/Logic Flaw

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

5CVSS7.3AI score0.01806EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2019/10/01 5:15 p.m.30 views

CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

7.5CVSS7.1AI score0.01806EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2019/10/01 4:55 p.m.81 views

CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

7.5CVSS7.4AI score0.01806EPSS
SaveExploits0
Rows per page
Query Builder