50 matches found
CVE-2021-0588
In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
grpc-swift:grpc-swift-fuzz-debug: Invalid-free in GRPC.GRPCWebToHTTP2ServerCodec.StateMachine.
Project: https://github.com/grpc/grpc-swift.git Detailed Report: https://oss-fuzz.com/testcase?key=4645975625957376 Project: grpc-swift Fuzzing Engine: libFuzzer Fuzz Target: grpc-swift-fuzz-debug Job Type: libfuzzerasangrpc-swift Platform Id: linux Crash Type: Invalid-free Crash Address:...
Cross site scripting
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
CVE-2018-12290
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
CVE-2018-12290
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
CVE-2018-12290
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
CVE-2018-12290
The CVE-2018-12290 entry concerns the Yii2-StateMachine extension for Yii2 (v2.x.x). Technical details in connected mappings confirm a cross-site scripting (XSS) vulnerability within this extension. The root cause is improper input handling leading to script injection in the Yii2-StateMachine cod...
CVE-2018-12290
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
PT-2018-11097
Name of the Vulnerable Software and Affected Versions Yii2-StateMachine extension versions 2.x.x Description The issue is related to a XSS problem in the Yii2-StateMachine extension. Recommendations For Yii2-StateMachine extension versions 2.x.x, update to a version that includes a fix for this...
