CVE-2019-10403

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a stored XSS vulnerability exploitable by users able to control SCM tag names for these actions...

PT-2018-16817

Name of the Vulnerable Software and Affected Versions Sourcetree for Windows versions prior to 2.5.5.0 Description The issue allows an attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows to exploit an argument injection vulnerability. This can lead ...

CVE-2018-5226: Undefined Security Weakness

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the...

CVE-2018-8769

elfutils 0.170 has a buffer over-read in the ebldynamictagname function of libebl/ebldynamictagname.c because SYMTABSHNDX is unsupported...

PT-2018-18624

Name of the Vulnerable Software and Affected Versions elfutils version 0.170 Description The issue is related to a buffer over-read in the ebl dynamic tag name function, located in the libebl/ebldynamictagname.c file. This occurs because SYMTAB SHNDX is unsupported. Recommendations For elfutils...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service DoS attacks and possibly other attacks. The vulnerability is related to the mishandling of XML tag name comparisons...

[SECURITY] [DLA 1164-1] mupdf security update

Package : mupdf Version : 0.9-2+deb7u4 CVE ID : CVE-2017-14687 CVE-2017-15587 Debian Bug : 877379 879055 Two security issues were discovered in mupdf, a lightweight PDF viewer. CVE-2017-14687 MuPDF allows attackers to cause a denial of service or possibly have unspecified other impact via a craft...

DEBIAN-CVE-2017-14687

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name...

Design/Logic Flaw

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name...

CVE-2017-14687

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name...

PT-2017-13624

Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.11 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file. This occurs because of mishandling of XML tag name comparisons, related to "Data...

CVE-2017-14687: Improper Restriction of Operations within the Bounds of a Memory Buffer

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name...

CVE-2017-11354

Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...

Rapid7 Nexpose Create Tags Page Cross-Site Scripting Vulnerability

Rapid7 Nexpose is a suite of vulnerability management software from Rapid7 USA that can synthesize different scans to deeply probe a network. The software proactively scans configuration environments for errors, vulnerabilities, malware and provides guidance to reduce risk. A cross-site scripting...

PT-2016-7817

Name of the Vulnerable Software and Affected Versions Rapid7 Nexpose version 6.4.12 Description The issue allows any authenticated user with the capability to create tags to inject cross-site scripting XSS elements in the tag name field on the Create Tags page. When this tag is viewed in the Tag...

PT-2016-5360 · Red Hat · Red Hat Satellite

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite versions 5.7 Description: The issue allows remote attackers to inject arbitrary web script or HTML via several vectors, including the PATH INFO to "systems/SystemEntitlements.do" API endpoint, the label parameter to...

PT-2009-4378 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4 through 8 Description: A remote code execution issue exists due to improper handling of table operations, allowing attackers to execute arbitrary code via a crafted HTML document that triggers...

CVE-2003-0768

CVE-2003-0768 concerns Microsoft ASP.NET 1.1. The description across provided sources states that remote attackers can bypass the Cross-Site Scripting (XSS) and Script Injection protection feature by injecting a null character at the beginning of a tag name. The connected documents confirm the af...