Lucene search
+L

15 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 6:05 a.m.•15 views

SUSE CVE-2008-5712

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service application crash via 1 a long COLOR attribute in an HR element; or a long a BGCOLOR or b BORDERCOLOR attribute in a 2 TABLE, 3 TD, or 4 TR element. NOTE: the FONT vector is already covered by CVE-2008-451...

5CVSS6.8AI score0.03802EPSS
SaveExploits2References3
Veracode
Veracode
•added 2017/01/04 5:03 a.m.•18 views

Cross-Site Scripting (XSS)

html-pipeline is vulnerable to cross-site scripting XSS attacks. The sanitization filter whitelists table elements, allowing a malicious user to inject and execute arbitrary scripts...

6.1AI score
SaveExploits0
NVD
NVD
•added 2015/11/13 3:59 a.m.•36 views

CVE-2015-6045

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript that improperly interacts with use of the Cascading Style Sheets CSS...

9.3CVSS7.6AI score0.19322EPSS
SaveExploits0References3
Prion
Prion
•added 2015/11/13 3:59 a.m.•27 views

Memory corruption

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript that improperly interacts with use of the Cascading Style Sheets CSS...

9.3CVSS8.2AI score0.19322EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2015/11/13 2:00 a.m.•51 views

CVE-2015-6045

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript that improperly interacts with use of the Cascading Style Sheets CSS...

8.3AI score0.19322EPSS
SaveExploits0References3
CNVD
CNVD
•added 2015/11/07 12:00 a.m.•18 views

Mozilla Firefox Features Denial of Service Vulnerability

Mozilla Firefox is an open source web browser. The Mozilla Firefox accessibility-tools feature on the OS X platform fails to properly interact with the TABLE element, allowing remote attackers to perform a denial-of-service attack by referencing the row index using the NSAccessibilityIndexAttribu...

7.5CVSS8.9AI score0.03018EPSS
SaveExploits0References1
Prion
Prion
•added 2015/11/05 5:59 a.m.•25 views

Code injection

The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...

7.5CVSS8.4AI score0.03018EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2015/11/05 2:00 a.m.•38 views

CVE-2015-7192

The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...

9.8AI score0.03018EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/05 12:00 a.m.•3 views

CVE-2015-7192: Undefined Security Weakness

The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...

7.5CVSS8.6AI score0.03018EPSS
SaveExploits0References2
Prion
Prion
•added 2011/01/18 6:03 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter...

4.3CVSS6.1AI score0.01086EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2011/01/18 5:00 p.m.•42 views

CVE-2010-4646

Cross-site scripting XSS vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter...

5.6AI score0.01086EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/01/18 12:00 a.m.•6 views

CVE-2010-4646: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter...

4.3CVSS6.1AI score0.01086EPSS
SaveExploits0References2
NVD
NVD
•added 2007/02/23 3:28 a.m.•29 views

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

6.5CVSS6.5AI score0.18285EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2007/02/23 12:00 a.m.•14 views

PT-2007-1310 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6.0.2900 SP2 and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing a table element with a CSS attribute that sets the position. This...

6.5CVSS7.4AI score0.18285EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/23 12:00 a.m.•4 views

CVE-2006-7031: Undefined Security Weakness

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

6.5CVSS5.8AI score0.18285EPSS
SaveExploits1References1
Rows per page
Query Builder