775 matches found
UBUNTU-CVE-2018-19797
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...
CVE-2018-19797
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...
LibSass Null Pointer Dereference Vulnerability
LibSass is the C/C++ port of the Sass engine. A null pointer dereference vulnerability exists in the Sass::SelectorList::populateextends function in SharedPtr.hpp in LibSass 3.5.5. An attacker could use this vulnerability to cause a denial of service application crash via a specially crafted sass...
No title provided
An XML External Entity XXE Injection vulnerability was reported in the XPath component of HornetQ...
serviceplusautomotive.com XSS vulnerability
Open Bug Bounty ID: OBB-672678 Description| Value ---|--- Affected Website:| serviceplusautomotive.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
June 12, 2018—KB4284835 (OS Build 17134.112)
None None...
UBUNTU-CVE-2018-11694
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...
DEBIAN-CVE-2018-11694
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...
AZL-27684 CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6
An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...
LibSaas null pointer dereference vulnerability (CNVD-2018-15181)
LibSaas is a C/C++ implementation of the Sass compiler. A null pointer dereference vulnerability exists in the Sass::Functions::selectorappend function in LibSaas 3.5.4 and earlier. An attacker could exploit this vulnerability to cause a denial of service application crash or possibly other impac...
CVE-2017-7427
Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...
Cross site scripting
Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...
CVE-2017-7427 iManager - Multiple Reflected Cross-Site Scripting attacks
Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...
autodesk.com XSS vulnerability
Open Bug Bounty ID: OBB-382751 Description| Value ---|--- Affected Website:| autodesk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-3579
XML external entity XXE vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
Xxe
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
UBUNTU-CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...
DEBIAN-CVE-2014-3600
XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...