PT-2026-33239

Name of the Vulnerable Software and Affected Versions Drupal Orejime versions 0.0.0 through 2.0.15 Description Improper neutralization of input during web page generation allows Cross-Site Scripting XSS. The IframeConsent element writes HTML attributes without escaping their values. An attacker...

EUVD-2015-3798

Malware in sbrugna...

PT-2024-36055

Name of the Vulnerable Software and Affected Versions: Backdrop CMS versions prior to 1.28.4 Backdrop CMS versions 1.29.x prior to 1.29.2 Description: The issue allows for Cross Site Scripting XSS via an SVG document, if the SVG tag is allowed for a text format. This occurs in Backdrop CMS when a...

PT-2023-23121 · Unknown · Backdrop Cms

Name of the Vulnerable Software and Affected Versions: Backdrop CMS versions prior to 1.24.2 Description: A stored Cross-site scripting XSS issue in Text Editors and Formats allows remote attackers to inject arbitrary web script or HTML via the name parameter. When a user is editing any content...

Mac OS X Arbitrary File Read

The vulnerability of the Text Formats component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a text file containing XML links to external objects...

CVE-2015-3762

The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

Xxe

The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2015-3762

CVE-2015-3762 affects Apple OS X Text Formats/TextEdit prior to 10.10.5. The issue is an XXE in XML parsing that can allow a remote attacker to read arbitrary files via a text file containing an XML external entity declaration with an entity reference. Root cause: XML External Entity handling in ...

CVE-2015-3762

The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2015-3762: Exposure of Sensitive Information to an Unauthorized Actor

The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

PT-2015-1879

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.5 Description The issue is related to an XML External Entity XXE problem in the Text Formats component, which can be exploited by remote attackers to read arbitrary files. This can be achieved through a text...