2784 matches found
CVE-2013-7452
The CVE-2013-7452 issue affects the Node.js validator module prior to version 1.1.0. The root cause is a flaw that allows remote attackers to bypass the cross-site scripting (XSS) filter when processing a crafted javascript URI. The impact described is bypassing the XSS filter; no other effects a...
CVE-2013-7454
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings...
CVE-2013-7453
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via vectors related to UI redressing...
CVE-2013-7452
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...
CVE-2013-7454
The CVE-2013-7454 entry concerns the Node.js validator module before 1.1.0, where the XSS filter can be bypassed by nested forbidden strings. Affected component: validator module (Node.js). Root cause: bypass of the blacklist-based XSS filter; exploitability is remote without authentication and c...
CVE-2013-7454
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings...
CVE-2013-7453
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via vectors related to UI redressing...
10tcl (>=0.0.6, <=0.0.10), @rtoken/contracts (1.0.1-rc6) +120 more potentially affected by CVE-2013-7454 via validator (>=0.1.8, <=1.0.0)
validator NPM version =0.1.8, =0.0.6, =1.0.1-rc6, =1.0.2, =0.0.1, =0.1.0-1, =0.3.3, =0.5.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.9 - azure 0.6.9-zumo and more Source cves: CVE-2013-7454 Source advisory: MEND:CVE-2013-7454...
10tcl (>=0.0.6, <=0.0.10), @rtoken/contracts (1.0.1-rc6) +300 more potentially affected by CVE-2014-9772 via validator (>=0.1.8, <=1.5.1)
validator NPM version =0.1.8, =0.0.6, =1.0.1-rc6, =1.0.2, =0.0.9, =0.0.1, =0.0.19, =0.1.0-1, =0.0.2, =0.3.3, =0.5.0, =0.5.0, =1.0.0, =1.0.2 - apostrophe-tumblr 0.5.3 and more Source cves: CVE-2014-9772 Source advisory: MEND:CVE-2014-9772...
10tcl (>=0.0.6, <=0.0.10), @rtoken/contracts (1.0.1-rc6) +120 more potentially affected by CVE-2013-7451 via validator (>=0.1.8, <=1.0.0)
validator NPM version =0.1.8, =0.0.6, =1.0.1-rc6, =1.0.2, =0.0.1, =0.1.0-1, =0.3.3, =0.5.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.9 - azure 0.6.9-zumo and more Source cves: CVE-2013-7451 Source advisory: MEND:CVE-2013-7451...
10tcl (>=0.0.6, <=0.0.10), @rtoken/contracts (1.0.1-rc6) +120 more potentially affected by CVE-2013-7452 via validator (>=0.1.8, <=1.0.0)
validator NPM version =0.1.8, =0.0.6, =1.0.1-rc6, =1.0.2, =0.0.1, =0.1.0-1, =0.3.3, =0.5.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.9 - azure 0.6.9-zumo and more Source cves: CVE-2013-7452 Source advisory: MEND:CVE-2013-7452...
10tcl (>=0.0.6, <=0.0.10), @rtoken/contracts (1.0.1-rc6) +120 more potentially affected by CVE-2013-7453 via validator (>=0.1.8, <=1.0.0)
validator NPM version =0.1.8, =0.0.6, =1.0.1-rc6, =1.0.2, =0.0.1, =0.1.0-1, =0.3.3, =0.5.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.9 - azure 0.6.9-zumo and more Source cves: CVE-2013-7453 Source advisory: MEND:CVE-2013-7453...
CVE-2013-7451
The CVE concerns the validator module for Node.js, specifically the version range before 1.1.0. The root cause is a bypass of the cross-site scripting (XSS) filter via a nested tag, enabling remote attackers to bypass input sanitization. The vulnerability is documented for CVE-2013-7451 and is re...
CVE-2013-7451
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag...
CVE-2014-9772
The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via hex-encoded characters...
CVE-2013-7452
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...
CVE-2014-9772
The CVE-2014-9772 entry concerns the validator package for Node.js. Affected versions are prior to 2.0.0, where the built-in XSS filter can be bypassed using hex-encoded characters. This can allow bypass of the filter and may enable script execution in contexts that rely on the validator’s XSS pr...
CVE-2013-7451
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag...
