789 matches found
The vulnerability of the Mozilla Firefox browser, related to the use of memory after its release, allows a hacker to trigger a service failure.
The vulnerability of the Mozilla Firefox browser is related to the use of a memory area after it is freed during the manipulation of CSS floating elements. Exploiting this vulnerability can allow an attacker who operates remotely to cause a service failure...
Mozilla: CSS Sanitizer performed incorrect sanitization
The Mozilla Foundation Security Advisory describes this flaw as: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass...
Mozilla: CSS Sanitizer performed incorrect sanitization
The Mozilla Foundation Security Advisory describes this flaw as: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass...
Mozilla: CSS Sanitizer performed incorrect sanitization
The Mozilla Foundation Security Advisory describes this flaw as: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass...
Mozilla: CSS Sanitizer performed incorrect sanitization
The Mozilla Foundation Security Advisory describes this flaw as: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass...
Mozilla: CSS Sanitizer performed incorrect sanitization
The Mozilla Foundation Security Advisory describes this flaw as: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass...
Mozilla: CSS Sanitizer performed incorrect sanitization
The Mozilla Foundation Security Advisory describes this flaw as: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass...
Mozilla: CSS Sanitizer performed incorrect sanitization
The Mozilla Foundation Security Advisory describes this flaw as: Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass...
The vulnerability of the Cascading Style Sheets (CSS) component of the Swagger UI tool for creating interactive documentation allows a attacker to perform a cross-site scripting attack.
The vulnerability of the Cascading Style Sheets CSS component of the Swagger UI tool for creating interactive documentation is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack...
DEBIAN-CVE-2020-6539
Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
GHSA-3J95-FJV2-3M4P CSS Injection in Chartkick gem
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets CSS Injection without attribute...
CVE-2020-16254
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets CSS Injection without attribute...
Code injection
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets CSS Injection without attribute...
Google Chrome CSS Code Issue Vulnerability
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in CSS in Google Chrome versions prior to 11.0.0.0. A remote attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted HTML pages...
Heybbs has a universal password login vulnerability
HEYBBS is a front-end based on bootstrap+jq+css,back-end php+mysql development of micro-community programs. Heybbs has a universal password login vulnerability that can be exploited by attackers to obtain sensitive database information...
Updated mediawiki packages fix security vulnerability
Updated mediawiki packages fix security vulnerability: In MediaWiki before 1.31.7, users can add various Cascading Style Sheets CSS classes which can affect what content is shown or hidden in the user interface to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because...
CVE-2020-10960
In MediaWiki before 1.34.1, users can add various Cascading Style Sheets CSS classes which can affect what content is shown or hidden in the user interface to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCollapsible allows applying an event handler ...
PT-2020-2139 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.34.1 Description: The issue in MediaWiki is related to the lack of proper output encoding or escaping, which can be exploited by a remote attacker to impact data integrity. Users can add various Cascading Style...