Lucene search
+L

467 matches found

NVD
NVD
added 2017/02/22 4:59 p.m.22 views

CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

6.1CVSS5.9AI score0.0216EPSS
SaveExploits0References7
Prion
Prion
added 2017/02/22 4:59 p.m.16 views

Cross site scripting

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

4.3CVSS5.9AI score0.0216EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2017/02/22 4:59 p.m.13 views

PYSEC-2017-15

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

6.1CVSS6.2AI score0.0216EPSS
SaveExploits0References8Affected Software1
UbuntuCve
UbuntuCve
added 2017/02/22 4:59 p.m.24 views

CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

6.1CVSS6.3AI score0.0216EPSS
SaveExploits0References3
OSV
OSV
added 2017/02/22 4:59 p.m.16 views

CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

6.1CVSS5.9AI score
SaveExploits0References7
Prion
Prion
added 2017/02/22 4:59 p.m.13 views

Cross site scripting

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

4.3CVSS5.8AI score0.0216EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2017/02/22 4:59 p.m.18 views

PYSEC-2017-14

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

6.1CVSS5.1AI score0.0216EPSS
SaveExploits0References8
OSV
OSV
added 2017/02/22 4:59 p.m.20 views

CVE-2016-9909

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

6.1CVSS5.8AI score
SaveExploits0References7
OSV
OSV
added 2017/02/22 4:59 p.m.19 views

PYSEC-2017-15

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

6.1CVSS4.4AI score0.0216EPSS
SaveExploits0References8
PyPA
PyPA
added 2017/02/22 4:59 p.m.10 views

PYSEC-2017-14

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

6.1CVSS6.1AI score0.0216EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2017/02/22 4:59 p.m.5 views

DEBIAN-CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

6.1CVSS5.8AI score0.0216EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2017/02/22 4:00 p.m.60 views

CVE-2016-9909

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

6.1CVSS5.9AI score0.0216EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2017/02/22 4:00 p.m.69 views

CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

6.1CVSS6AI score0.0216EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/02/22 4:00 p.m.35 views

CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

5.9AI score0.0216EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2017/02/22 4:00 p.m.29 views

CVE-2016-9909

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

5.8AI score0.0216EPSS
SaveExploits0References7
zdt
zdt
added 2017/02/07 12:00 a.m.53 views

PEAR HTML_AJAX 0.5.7 (PHP Serializer) PHP Object Injection Vulnerability

Exploit for php platform in category web applications --------------------------------------------------------------------------- PEAR HTMLAJAX = 0.5.7 PHP Serializer PHP Object Injection Vulnerability --------------------------------------------------------------------------- - Software Link:...

7.5CVSS9.2AI score0.04826EPSS
SaveExploits2
NVD
NVD
added 2017/02/06 6:59 p.m.18 views

CVE-2017-5677

PEAR HTMLAJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression...

9.8CVSS9.9AI score0.04826EPSS
SaveExploits2References6
Prion
Prion
added 2017/02/06 6:59 p.m.22 views

Design/Logic Flaw

PEAR HTMLAJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression...

7.5CVSS9.8AI score0.04826EPSS
SaveExploits2References6Affected Software1
Positive Technologies
Positive Technologies
added 2017/01/03 12:00 a.m.7 views

PT-2017-10386 · Html5Lib +1 · Html5Lib +1

Name of the Vulnerable Software and Affected Versions: html5lib versions prior to 0.99999999 Description: The issue concerns the serializer in html5lib, which might allow remote attackers to conduct cross-site scripting XSS attacks. This is due to the mishandling of special characters in attribut...

6.1CVSS6.2AI score0.0216EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
added 2017/01/03 12:00 a.m.8 views

PT-2017-10385 · Html5Lib +1 · Html5Lib +1

Name of the Vulnerable Software and Affected Versions: html5lib versions prior to 0.99999999 Description: The issue concerns the mishandling of the character in attribute values by the serializer in html5lib, potentially allowing remote attackers to conduct cross-site scripting XSS attacks...

6.1CVSS6AI score0.0216EPSS
SaveExploits0References27
Rows per page
Query Builder