Lucene search
+L

2943 matches found

Github Security Blog
Github Security Blog
•added 2021/10/19 8:15 p.m.•87 views

Policies not properly enforced in bluemonday

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS2.1AI score0.01564EPSS
SaveExploits1References7Affected Software2
zdt
zdt
•added 2021/10/19 12:00 a.m.•349 views

Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection Exploit

Exploit Title: Online Motorcycle Bike Rental System 1.0 - Blind Time-Based SQL Injection Unauthenticated Exploit Author: Chase ComardelleCASO Vendor Homepage: https://www.sourcecodester.com/php/14989/online-motorcycle-bike-rental-system-phpoop-source-code.html Software Link:...

7.4AI score
SaveExploits0
OSV
OSV
•added 2021/10/18 3:15 p.m.•15 views

DEBIAN-CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS8.5AI score0.01564EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/18 3:15 p.m.•10 views

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS6.8AI score0.02975EPSS
SaveExploits1References3
OSV
OSV
•added 2021/10/18 3:15 p.m.•26 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS9.5AI score
SaveExploits0References1
OSV
OSV
•added 2021/10/18 3:15 p.m.•10 views

UBUNTU-CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS7.3AI score0.01564EPSS
SaveExploits1References3
OSV
OSV
•added 2021/10/18 3:15 p.m.•23 views

PYSEC-2021-849

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS2.4AI score0.01564EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/10/18 3:15 p.m.•13 views

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS5.8AI score0.02975EPSS
SaveExploits1References4
Prion
Prion
•added 2021/10/18 3:15 p.m.•32 views

Design/Logic Flaw

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

7.5CVSS9.2AI score0.02975EPSS
SaveExploits1References3Affected Software3
UbuntuCve
UbuntuCve
•added 2021/10/18 3:15 p.m.•24 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS7.2AI score0.01564EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/10/18 3:15 p.m.•11 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS5.8AI score0.01564EPSS
SaveExploits1References2
PyPA
PyPA
•added 2021/10/18 3:15 p.m.•48 views

PYSEC-2021-849

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS7AI score0.01564EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/10/18 2:38 p.m.•57 views

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.6AI score0.02975EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/10/18 2:36 p.m.•40 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8AI score0.01564EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2021/10/18 2:36 p.m.•59 views

CVE-2021-42576

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS9.6AI score0.01564EPSS
SaveExploits1
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•17 views

Sanitize 输入验证错误漏洞

Sanitize is an HTML and CSS cleaner by Ryan Grove, an individual developer in the United States, which supports removing HTML and CSS from strings, among other things. Sanitizer suffers from an input validation error vulnerability that stems from OWASP Java HTML Sanitizer before 20211018.1 not...

9.8CVSS7.2AI score0.02975EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•3 views

CVE-2021-42575: Undefined Security Weakness

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS5.8AI score0.02975EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/10/18 12:00 a.m.•9 views

PT-2021-23638 · Owasp · Owasp Java Html Sanitizer

Name of the Vulnerable Software and Affected Versions: OWASP Java HTML Sanitizer versions prior to 20211018.1 Description: The issue is related to the improper enforcement of policies associated with the SELECT, STYLE, and OPTION elements. This affects the OWASP Java HTML Sanitizer...

9.8CVSS8.3AI score0.02975EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•23 views

David Kitchen bluemonday 安全漏洞

David Kitchen bluemonday is a David Kitchen open source application . HTML cleaner for implementation in Go. A security vulnerability exists in bluemonday sanitizer, which originates in bluemonday before 1.0.16 in Go and before 0.0.8 in Python in pybluemonday, that does not correctly enforce the...

9.8CVSS8.3AI score0.01564EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•2 views

CVE-2021-42576: Undefined Security Weakness

The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python in pybluemonday, does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

9.8CVSS5.8AI score0.01564EPSS
SaveExploits1References1
Rows per page
Query Builder