CVE-2018-10000

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

Video Downloader Universal Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Video Downloader Extension: Universal XSS Browsing through the list of most popular Chrome extensions, I noticed this extension with 4M users:...

CVE-2017-2492

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...

CVE-2017-2492

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...

CVE-2017-2492

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...

CVE-2017-2492

CVE-2017-2492 is an UXSS vulnerability in Apple’s JavaScriptCore affecting iOS <10.3, Safari <10.1, and tvOS

universalhumanenergy.com XSS vulnerability

Open Bug Bounty ID: OBB-590766 Description| Value ---|--- Affected Website:| universalhumanenergy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

universal-tech.com XSS vulnerability

Open Bug Bounty ID: OBB-590764 Description| Value ---|--- Affected Website:| universal-tech.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The bundled Atlassian Universal Plugin Manager plugin had a XSS issue - CVE-2018-5229

The version of the bundled Atlassian Universal Plugin Manager plugin had a cross site scripting vulnerability XSS. See https://ecosystem.atlassian.net/browse/UPM-5871 for more details...

The bundled Atlassian Universal Plugin Manager plugin had a XSS issue - CVE-2018-5229

The version of the bundled Atlassian Universal Plugin Manager plugin had a cross site scripting vulnerability XSS. See https://ecosystem.atlassian.net/browse/UPM-5871 for more details...

March 23, 2018—KB4088881 (Preview of Monthly Rollup)

None None...

March 22, 2018—KB4088882 (Preview of Monthly Rollup)

None None...

Illegal Memory Access Vulnerability in Lovecraft Universal Player

Lovecraft Universal Player is a universal video and audio player from Lovecraft. A QiYi Universal Player suffers from an illegal memory access vulnerability when handling special avi files, which can be exploited by an attacker to cause a denial of service attack...

Heap Overflow Vulnerability in Lovecraft Universal Player

Lovecraft Universal Player is a universal video and audio player from Lovecraft. A QiYi Universal Player suffers from a heap overflow vulnerability when handling special mp4 files, which can be exploited by an attacker to cause a denial of service attack...

Null Pointer Reference Vulnerability in Lovecraft Universal Player

Aiki Universal Player is a local video software that can also play image files and supports almost all major video formats. Aqiyi Universal Player has a null pointer reference vulnerability when handling special mp4 files, which can be exploited by an attacker to cause a denial of service attack...

Oracle Database Server Oracle Universal Installer Component Unspecified Vulnerability

Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Micro Focus Universal CMDB Foundation Software Sensitive Information Disclosure Vulnerability

Micro Focus Universal CMDB Foundation Software is a suite of resource management software from Micro Focus, UK. The software provides from the bottom up including automatic discovery of IT infrastructure, data modeling, service mapping definition and service impact analysis and other functions. A...

Micro Focus Universal CMDB Arbitrary Code Execution Vulnerability

Micro Focus Universal CMDB is a resource management solution from Micro Focus in the United Kingdom. The solution provides bottom-up capabilities including IT infrastructure auto-discovery, data modeling, service mapping definition and service impact analysis, etc. Configuration Manager is one of...

Wireshark UMTS MAC Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.UMTS MAC dissector is one of the 3G network address parsers. A security...