CVE-2016-5174

browser/ui/cocoa/browserwindowcontrollerprivate.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen transition, which allows remote attackers to cause a denial of service unsuppressed popup via a crafted web site...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: Several security fixes in this release, including: 641101 High CVE-2016-5170: Use after free in Blink.Credit to Anonymous 643357 High CVE-2016-5171: Use after free in Blink. Credit to Anonymous 616386 Medium CVE-2016-5172: Arbitrary Memory Read in v8. Credit to...

Updated python-django packages fix security vulnerability

It was discovered that Django is prone to a cross-site scripting vulnerability in the admin's add/change related popup CVE-2016-6186...

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

django: XSS in admin's add/change related popup

A cross-site scripting XSS flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript's Element.innerHTML to forge content in the admin's add/change related pop-up. Element.textContent is now used to prevent XSS data execution...

Mozilla Firefox and Firefox ESR 'nsXULPopupManager::KeyDown' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the 'nsXULPopupManager::KeyDown' function in Mozilla Firefox and Firefox, which can be exploited by a remote attacker to construct a malicious WEB pa...

VulnCheck KEV: CVE-2014-1511

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors...

nidmar.ca XSS vulnerability

Vulnerable URL: http://www.nidmar.ca/login/popupwindow/login.asp?href=/products/products.asp?cat=4' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7347823 VIP website status:| No...

python-django: cross-site scripting

Unsafe usage of JavaScript's Element.innerHTML could result in XSS in the admin's add/change related popup. Element.textContent is now used to prevent execution of the data. The debug view also used innerHTML. Although a security issue wasn't identified there, out of an abundance of caution it's...

USN-3039-1 python-django vulnerability

It was discovered that Django incorrectly handled the admin's add/change related popup. A remote attacker could possibly use this issue to perform a cross-site scripting attack...

The vulnerability of the Firefox browser, which allows a malicious individual to execute cross-site scripting attacks

The Mozilla Firefox browser contains a vulnerability that can be exploited if the security settings are not properly configured to block pop-up windows. This allows malicious individuals to bypass the protection mechanisms for cross-site scripting scenarios...

The vulnerability of the Opera browser allows a malicious actor to execute arbitrary code by double-clicking on a pop-up window.

The Opera browser contains a vulnerability related to the use of double-clicking on pop-up windows. This allows a malicious individual to create a pop-up window. With the first click on the window, an additional form appears in the address bar, and with a second click on that form, arbitrary code...

Bime: Bime Unable to load Data Sources

The BIME unable to load the datasource, when user has created larger number of data source , and as a result it's throws error poppup and the enduser can't do any thing, the entire PAGE got broken, can't delete any datasources which leads entire BIME functionality broken This is Error Popup Messa...

Wordpress Popup Images 插件-popup.php文件-跨站脚本漏洞

No description provided by source...

WordPress Tidio Gallery Plugin <= 1.1 - Cross Site Scripting (XSS)

This vulnerability is in the php code /tidio-gallery/popup-insert-help.php. Solution Update the plugin...

CVE-2016-0955

Cross-site scripting XSS vulnerability in Adobe Experience Manager AEM 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Experience Manager AEM 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog...

CVE-2016-0955

CVE-2016-0955 affects Adobe Experience Manager (AEM) 6.1.0. It is a cross-site scripting (XSS) vulnerability in the Deletion popup dialog where a folder title field is mishandled, allowing a remote authenticated user to inject arbitrary web script or HTML. The issue is confirmed in multiple feeds...

as2.ori.nic.in XSS vulnerability

Vulnerable URL: http://as2.ori.nic.in:8080/web/bus.jsp?msg=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...