UBUNTU-CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

Design/Logic Flaw

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

CVE-2019-10219

The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21) +5726 more potentially affected by CVE-2019-10219 via org.hibernate.validator:hibernate-validator (>=6.0.0.alpha1, <=6.0.17.final)

org.hibernate.validator:hibernate-validator MAVEN version =6.0.0.alpha1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =greenwich.sr2.1 and more Source cves: CVE-2019-10219...

com.hack23.cia:service.api (>=2018.12.15, <=2019.6.23), com.hack23.cia:service.data.impl (>=2018.12.15, <=2019.6.23) +5 more potentially affected by CVE-2019-10219 via org.hibernate.validator:hibernate-validator (>=6.1.0.alpha1, <=6.1.0.alpha5)

org.hibernate.validator:hibernate-validator MAVEN version =6.1.0.alpha1, =2018.12.15, =2018.12.15, =2018.12.15, =0.11.0, =0.13.0, =0.11.0, =6.1.0.alpha1, =6.1.0.alpha5 Source cves: CVE-2019-10219 Source advisory: MEND:CVE-2019-10219...

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

br.com.thiaguten:umbrella-configuration (>=0.1.0, <=1.0.0), br.com.thiaguten:umbrella-core (>=0.1.0, <=1.0.0) +871 more potentially affected by CVE-2019-10219 via org.hibernate:hibernate-validator (>=6.0.0.beta2, <=6.0.17.final)

org.hibernate:hibernate-validator MAVEN version =6.0.0.beta2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.3.2-beta.6, =2.3.2-beta.5, =0.8.2-release, =0.6-release, =0.8.2-release, =0.8.0-release, =0.8.2.9-release, =0.8.4.0-release, =0.8.4.4-release and more Source cves: CVE-2019-10219 Source...

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

CVE-2019-10219: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

CVE-2013-4751

php-symfony2-Validator has loss of information during serialization...

Session fixation

php-symfony2-Validator has loss of information during serialization...

CVE-2013-4751

The CVE-2013-4751 entry concerns Symfony2 Validator, where a caching path (e.g., APCache or other CacheInterface implementations) leads to loss of serialization data in the Mapping Cache. The consequence described in connected documents is that when the validator’s configuration is loaded from th...

CVE-2013-4751

php-symfony2-Validator has loss of information during serialization...

CVE-2013-4751

php-symfony2-Validator has loss of information during serialization...

CVE-2013-4751: Improper Input Validation

php-symfony2-Validator has loss of information during serialization...

PT-2019-6969

Name of the Vulnerable Software and Affected Versions php-symfony2-Validator affected versions not specified Description The issue concerns the loss of information during serialization when using the Validator component with caching enabled, specifically with...

DEBIAN-CVE-2018-5735

The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar...

CVE-2018-5735

The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar...

Improper Authentication in Auth0.AuthenticationApi

Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens...