CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

CVE-2017-18926

CVE-2017-18926 affects Raptor RDF Syntax Library 2.0.15, where raptor_xml_writer_start_element_common miscalculates the maximum number of XML namespace declarations, causing heap-based buffer overflows (observed with raptor_qname_format_as_xml). The connected Nessus advisories show the issue impa...

CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

PT-2020-6185

Name of the Vulnerable Software and Affected Versions Raptor RDF Syntax Library version 2.0.15 Description The issue is related to the raptor xml writer start element common function in the Raptor RDF Syntax Library, which miscalculates the maximum number of nspace declarations for the XML writer...

CVE-2017-18926: Out-of-bounds Write

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

schadeautos.nl Cross Site Scripting vulnerability OBB-1401443

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

USN-4535-1 rdflib vulnerability

Gabriel Corona discovered that RDFLib did not properly load modules on the command-line. An attacker could possibly use this issue to cause RDFLib to execute arbitrary code. CVE-2019-7653...

CVE-2020-12646

OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document...

CVE-2020-12646

OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document...

PT-2020-13184

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.3 and earlier Description The issue allows for XSS attacks through various means, including text/x-javascript, text/rdf, or a PDF document. Recommendations For OX App Suite versions 7.10.3 and earlier, update to a...

CVE-2020-12646: Improper Neutralization of Input During Web Page Generation

OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document...

CVE-2020-4025

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Sit...

Cross site scripting

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Sit...

CVE-2020-4025

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Sit...

PT-2020-17839

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.5.5 Atlassian Jira Server and Data Center versions 8.6.0 through 8.8.1 Atlassian Jira Server and Data Center versions 8.9.0 Description The issue allows remote attackers to inject...

CVE-2020-4025: Improper Neutralization of Input During Web Page Generation

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Sit...

XSS in Issue - Attachments - CVE-2020-4025

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability issue attachments with a rdf content type. Affected versions: version 8.5.5 8.6.0 ≤ version 8.8.2 8.9.0 ≤ version 8.9.1 Fixed...

Prototype Pollution

rdf-graph-array is vulnerable to prototype pollution. The vulnerability exists as the rdf.Graph.prototype.add method could be used to add or modify properties of Object.prototype...

CVE-2019-10798

rdf-graph-array through 0.3.0-rc6 manipulation of JavaScript objects resutling in Prototype Pollution. The rdf.Graph.prototype.add method could be tricked into adding or modifying properties of Object.prototype...