Lucene search
+L

59 matches found

RedHat Linux
RedHat Linux
•added 2020/01/21 3:22 a.m.•11 views

hibernate-validator: safeHTML validator allows XSS

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.9AI score0.02167EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2020/01/21 2:57 a.m.•24 views

hibernate-validator: safeHTML validator allows XSS

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.9AI score0.02167EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2020/01/21 2:23 a.m.•19 views

hibernate-validator: safeHTML validator allows XSS

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.9AI score0.02167EPSS
SaveExploits0References6
Veracode
Veracode
•added 2020/01/09 12:38 a.m.•55 views

Cross-site Scripting (XSS)

hibernate-validator is vulnerable to cross-site scripting XSS. The vulnerability exists as the SafeHtml annotation from SafeHtmlValidator does not properly sanitize payloads in HTML comments...

6.1CVSS0.8AI score0.02167EPSS
SaveExploits0References22Affected Software1
OSV
OSV
•added 2020/01/08 5:01 p.m.•210 views

GHSA-M8P2-495H-CCMH The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS7.2AI score0.02167EPSS
SaveExploits0References27
Github Security Blog
Github Security Blog
•added 2020/01/08 5:01 p.m.•117 views

The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS1.8AI score0.02167EPSS
SaveExploits0References27Affected Software2
NVD
NVD
•added 2019/11/08 3:15 p.m.•33 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.6AI score0.02167EPSS
SaveExploits0References19
OSV
OSV
•added 2019/11/08 3:15 p.m.•38 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.1CVSS5.8AI score
SaveExploits0References19
OSV
OSV
•added 2019/11/08 3:15 p.m.•15 views

UBUNTU-CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.7AI score0.02167EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2019/11/08 3:15 p.m.•37 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.7AI score0.02167EPSS
SaveExploits0References2
Prion
Prion
•added 2019/11/08 3:15 p.m.•28 views

Design/Logic Flaw

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

4.3CVSS7.2AI score0.02167EPSS
SaveExploits0References14Affected Software175
Cvelist
Cvelist
•added 2019/11/08 2:46 p.m.•50 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS7.4AI score0.02167EPSS
SaveExploits0References18
Debian CVE
Debian CVE
•added 2019/11/08 2:46 p.m.•98 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS7AI score0.02167EPSS
SaveExploits0
CVE
CVE
•added 2019/11/08 2:46 p.m.•387 views

CVE-2019-10219

The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...

6.5CVSS6AI score0.02167EPSS
SaveExploits0References19Affected Software1
RedhatCVE
RedhatCVE
•added 2019/08/28 1:21 p.m.•52 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS1.7AI score0.02167EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2012/06/13 12:00 a.m.•95 views

Microsoft Lync Remote Code Execution Vulnerabilities (2707956)

This host is missing a critical security update according to Microsoft Bulletin MS12-039. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5.6AI score0.78138EPSS
SaveExploits8References8
Positive Technologies
Positive Technologies
•added 2012/06/12 12:00 a.m.•7 views

PT-2012-3601 · Microsoft · Lync +4

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 8 through 9 Microsoft Communicator version 2007 R2 Microsoft Lync versions 2010 through 2010 Attendee Description: The toStaticHTML API, also known as the SafeHTML component, does not properly handle event...

4.3CVSS5.3AI score0.22024EPSS
SaveExploits6References13
OpenVAS
OpenVAS
•added 2011/09/22 12:00 a.m.•52 views

Microsoft SharePoint SafeHTML Information Disclosure Vulnerabilities (2412048)

This host is missing an important security update according to Microsoft Bulletin MS10-072. OpenVAS Vulnerability Test $Id: secpodms10-072.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft SharePoint SafeHTML Information Disclosure Vulnerabilities 2412048 Authors: Rachana Shetty Copyright: Copyright...

4.3CVSS8.7AI score0.25016EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2011/09/22 12:00 a.m.•54 views

Microsoft SharePoint SafeHTML Information Disclosure Vulnerabilities (2412048)

This host is missing an important security update according to Microsoft Bulletin MS10-072. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.3CVSS4.9AI score0.25016EPSS
SaveExploits3References4
Check Point Advisories
Check Point Advisories
•added 2011/09/13 12:00 a.m.•22 views

Preemptive Protection against Microsoft Internet Explorer SafeHTML Cross-Site Scripting (MS11-074)

An information disclosure vulnerability has been reported in Internet Explorer. A remote attacker may exploit this vulnerability to perform cross-site scripting attacks and run script in the security context of the logged-on user...

4.3CVSS5.4AI score0.13973EPSS
SaveExploits3
Rows per page
Query Builder