Lucene search
+L

775 matches found

OSV
OSV
added 2018/12/03 6:29 a.m.6 views

UBUNTU-CVE-2018-19797

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...

6.5CVSS6.9AI score0.01829EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2018/12/03 6:0 a.m.22 views

CVE-2018-19797

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...

6.5CVSS7.8AI score0.01829EPSS
SaveExploits0
CNVD
CNVD
added 2018/12/03 12:0 a.m.5 views

LibSass Null Pointer Dereference Vulnerability

LibSass is the C/C++ port of the Sass engine. A null pointer dereference vulnerability exists in the Sass::SelectorList::populateextends function in SharedPtr.hpp in LibSass 3.5.5. An attacker could use this vulnerability to cause a denial of service application crash via a specially crafted sass...

6.5CVSS8.7AI score0.01829EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2018/10/16 5:38 p.m.7 views

No title provided

An XML External Entity XXE Injection vulnerability was reported in the XPath component of HornetQ...

7.3AI score
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2018/09/03 8:32 p.m.11 views

serviceplusautomotive.com XSS vulnerability

Open Bug Bounty ID: OBB-672678 Description| Value ---|--- Affected Website:| serviceplusautomotive.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Microsoft KB
Microsoft KB
added 2018/06/12 7:0 a.m.168 views

June 12, 2018—KB4284835 (OS Build 17134.112)

None None...

9.3CVSS7.3AI score0.7131EPSS
SaveExploits8
OSV
OSV
added 2018/06/04 6:29 a.m.3 views

UBUNTU-CVE-2018-11694

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

8.8CVSS7.2AI score0.01707EPSS
SaveExploits1References2
OSV
OSV
added 2018/06/04 6:29 a.m.3 views

DEBIAN-CVE-2018-11694

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

8.8CVSS8.7AI score0.01707EPSS
SaveExploits1References1
OSV
OSV
added 2018/06/04 6:29 a.m.10 views

AZL-27684 CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

8.8CVSS7.3AI score0.01707EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/06/04 12:0 a.m.3 views

LibSaas null pointer dereference vulnerability (CNVD-2018-15181)

LibSaas is a C/C++ implementation of the Sass compiler. A null pointer dereference vulnerability exists in the Sass::Functions::selectorappend function in LibSaas 3.5.4 and earlier. An attacker could exploit this vulnerability to cause a denial of service application crash or possibly other impac...

8.8CVSS8.5AI score0.01707EPSS
SaveExploits1References1
OSV
OSV
added 2018/03/05 4:29 p.m.3 views

CVE-2017-7427

Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...

6.1CVSS5.6AI score0.008EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/05 4:29 p.m.20 views

Cross site scripting

Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...

4.3CVSS6.4AI score0.008EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/05 4:0 p.m.22 views

CVE-2017-7427 iManager - Multiple Reflected Cross-Site Scripting attacks

Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...

5.4CVSS6.5AI score0.008EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2017/11/01 1:51 a.m.11 views

autodesk.com XSS vulnerability

Open Bug Bounty ID: OBB-382751 Description| Value ---|--- Affected Website:| autodesk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
NVD
NVD
added 2017/10/27 7:29 p.m.22 views

CVE-2014-3579

XML external entity XXE vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

9.8CVSS9.5AI score0.04592EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2017/10/27 7:29 p.m.34 views

CVE-2014-3600

XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

9.8CVSS7.3AI score0.09851EPSS
SaveExploits0References2
NVD
NVD
added 2017/10/27 7:29 p.m.22 views

CVE-2014-3600

XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

9.8CVSS8.7AI score0.09851EPSS
SaveExploits0References6
Prion
Prion
added 2017/10/27 7:29 p.m.27 views

Xxe

XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

7.5CVSS7.3AI score0.09851EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2017/10/27 7:29 p.m.5 views

UBUNTU-CVE-2014-3600

XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

9.8CVSS5.8AI score0.09851EPSS
SaveExploits0References3
OSV
OSV
added 2017/10/27 7:29 p.m.2 views

DEBIAN-CVE-2014-3600

XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

9.8CVSS9.6AI score0.09851EPSS
SaveExploits0References1
Rows per page
Query Builder