Lucene search
+L

48 matches found

OSV
OSV
•added 2014/11/21 12:44 p.m.•36 views

MGASA-2014-0462 Updated python-djblets packages fix security vulnerabilities

Cross-site scripting XSS vulnerability in util/templatetags/djbletsjs.py in Djblets before 0.7.30 for Django, as used in Review Board, allows remote attackers to inject arbitrary web script or HTML via a JSON object, as demonstrated by the name field when changing a user name CVE-2014-3994...

4.3CVSS5.2AI score0.02412EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2014/06/16 6:55 p.m.•30 views

CVE-2014-3995

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

4.3CVSS6AI score0.02101EPSS
SaveExploits1References2
Prion
Prion
•added 2014/06/16 6:55 p.m.•18 views

Cross site scripting

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

4.3CVSS6AI score0.02101EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2014/06/16 6:55 p.m.•12 views

PYSEC-2014-79

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

4.3CVSS6AI score0.02101EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2014/06/16 6:55 p.m.•31 views

PYSEC-2014-79

Cross-site scripting XSS vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name...

4.3CVSS4.1AI score0.02101EPSS
SaveExploits1References7
NVD
NVD
•added 2006/05/11 10:02 a.m.•29 views

CVE-2006-2307

Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...

4.3CVSS5.5AI score0.01342EPSS
SaveExploits0References7
Prion
Prion
•added 2006/05/11 10:02 a.m.•27 views

Cross site scripting

Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...

4.3CVSS5.9AI score0.01342EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2006/05/11 10:00 a.m.•37 views

CVE-2006-2307

Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...

5.5AI score0.01342EPSS
SaveExploits0References7
Rows per page
Query Builder