Lucene search
+L

29 matches found

Snyk
Snyk
added 2024/10/04 2:41 p.m.8 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the HtmlGenerator class. An attacker can inject malicious scripts into web pages by manipulating the color and text properties of MotdItem objects while generating HTML content. Workaround Users who are not...

7.2CVSS5.3AI score0.00389EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/10/04 2:20 p.m.42 views

CVE-2024-47765 Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS

Minecraft MOTD Parser is a PHP library to parse minecraft server motd. The HtmlGenerator class is subject to potential cross-site scripting XSS attack through a parsed malformed Minecraft server MOTD. The HtmlGenerator iterates through objects of MotdItem that are contained in an object of...

6.9CVSS0.00389EPSS
SaveExploits0References2
Prion
Prion
added 2016/04/22 6:59 p.m.25 views

Design/Logic Flaw

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

9.3CVSS8.9AI score0.43408EPSS
SaveExploits36References2Affected Software5
NVD
NVD
added 2016/04/22 6:59 p.m.30 views

CVE-2015-8823

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

9.3CVSS9.2AI score0.06431EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2016/04/22 6:59 p.m.33 views

CVE-2015-8823

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

9.3CVSS7.5AI score0.06431EPSS
SaveExploits0References3
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.32 views

Winzip 15.0 WZFLDVW.OCX Text Property Denial of Service

No description provided by source. Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2010/12/06 12:00 a.m.38 views

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/...

SaveExploits0
Exploit DB
Exploit DB
added 2010/12/06 12:00 a.m.42 views

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service

Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter : http://twitter.com/FadyOsman 'Wscript.echo...

5.3AI score
SaveExploits0
Cvelist
Cvelist
added 2007/07/05 8:00 p.m.29 views

CVE-2007-3579

PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script...

6.7AI score0.0105EPSS
SaveExploits0References4
Rows per page
Query Builder