Cross-site Scripting (XSS)

Overview smashing is an a framework for pulling together an overview of data that is important to your team and displaying it easily on TVs around the office. Affected versions of this package are vulnerable to Cross-site Scripting XSS. A URL for a widget can be crafted and used to execute...

CVE-2021-35440

Smashing 1.3.4 is vulnerable to Cross Site Scripting XSS. A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment e.g. if re-using internal URL's for...

CVE-2021-35440

Smashing 1.3.4 is vulnerable to Cross Site Scripting XSS. A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment e.g. if re-using internal URL's for...

CVE-2021-35440

Smashing 1.3.4 is vulnerable to Cross Site Scripting XSS. A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment e.g. if re-using internal URL's for...

Cross site scripting

Smashing 1.3.4 is vulnerable to Cross Site Scripting XSS. A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment e.g. if re-using internal URL's for...

CVE-2021-35440

Smashing 1.3.4 is vulnerable to Cross-Site Scripting (XSS) via a crafted widget URL that can execute JavaScript in a victim’s browser and potentially exfiltrate session data/cookies. Affected component: the Smashing widget URL handling; root cause is insufficient input validation/escaping in the ...

CVE-2021-35440

Smashing 1.3.4 is vulnerable to Cross Site Scripting XSS. A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment e.g. if re-using internal URL's for...

smashing 跨站脚本漏洞

smashing is a software application. A framework based on Sinatra. A cross-site scripting vulnerability exists in Smashing 1.3.4, which stems from the ability to craft a URL for a widget and use it to execute JavaScript on a victim's computer...

SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2021:1904-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1904-1 advisory. - CVE-2021-3185: h264parser: guard against refpicmarkings overflow bsc1181255 Tenable has extracted the preceding description block directly...

SUSE SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2021:1873-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:1873-1 advisory. - CVE-2021-3185: Fixed buffer overflow in gsth264sliceparsedecrefpicmarking bsc1181255. Tenable has extracted the preceding description bloc...

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

DEBIAN-CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

UBUNTU-CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-3185

CVE-2021-3185 affects the gstreamer gst-plugins-bad before v1.18.1, where parsing an H.264 header can cause stack smashing, memory corruption, and potentially code execution. The connected documents show multiple vendor advisories (RHEL, Gentoo GLSA, EulerOS, Astra, Nessus) noting this vulnerabil...

CVE-2021-3185

A flaw was found in the gstreamer h264 component where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption to occur, and possibly code execution...

MGASA-2021-0028 Updated cairo packages fix a security vulnerability

LibreOffice slideshow aborts with stack smashing in cairo’s compositeboxes CVE-2020-35492...

Debian: Security Advisory (DLA-2518-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2518-1 : cairo security update

LibreOffice slideshow aborts with stack smashing in cairos compositeboxes. For Debian 9 stretch, this problem has been fixed in version 1.14.8-1+deb9u1. We recommend that you upgrade your cairo packages. For the detailed security status of cairo please refer to its security tracker page at:...