2784 matches found
CVE-2016-1182
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting XSS attacks or cause a denial of service via crafted input, a related issue to CVE-2015-0899...
DEBIAN-CVE-2016-5730
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving 1 an array value to FormDisplay.php, 2 incorrect data to validate.php, 3 unexpected data to Validator.php, 4 a missing config directory...
UBUNTU-CVE-2016-5730
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving 1 an array value to FormDisplay.php, 2 incorrect data to validate.php, 3 unexpected data to Validator.php, 4 a missing config directory...
Apache Struts vulnerable to denial-of-service (DoS)
Overview Apache Struts provided by the Apache Software Foundation is a software framework for creating web applications in Java. Web applications that are developed using Apache Struts 2 contain a denial-of-service DoS vulnerability due to an issue in URLValidator. ASAI Ken reported this...
Apache Struts2 Remote Code Execution Vulnerability (CNVD-2016-04089)
Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications , mainly provides two versions of the framework products , Struts 1 and Struts 2...
CVE-2016-1797
Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app...
Joyent Node.js validator security bypass vulnerability (CNVD-2016-02546)
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...
Joyent Node.js validator security bypass vulnerability (CNVD-2016-02547)
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...
Joyent Node.js validator security bypass vulnerability
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...
Joyent Node.js validator security bypass vulnerability (CNVD-2016-02545)
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...
Joyent Node.js validator security bypass vulnerability (CNVD-2016-02548)
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...
Stored XSS in ViewWorkflowTransition.jsp
Step to reproduce: 1 Go to workflow edit page as an administrator 2 Add validator "User Permission Validator" to transition with user name parameter "alert2" 3 It will trigger xss on ViewWorkflowTransition page...
Stored XSS in ViewWorkflowTransition.jsp
Step to reproduce: 1 Go to workflow edit page as an administrator 2 Add validator "User Permission Validator" to transition with user name parameter "alert2" 3 It will trigger xss on ViewWorkflowTransition page...
Cross-Site Scripting in link validator component
More info at https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-002/...
[SECURITY] Fedora 22 Update: nodejs-is-my-json-valid-2.12.4-1.fc22
A JSONSchema validator that uses code generation to be extremely fast...
PT-2017-5758
Name of the Vulnerable Software and Affected Versions: validator module versions prior to 1.1.0 Description: The issue allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI. This could potentially lead to malicious script execution. Recommendations: Fo...
PT-2017-5760
Name of the Vulnerable Software and Affected Versions: validator versions prior to 1.1.0 Description: The issue allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings. Several cross-site scripting vulnerabilities are present due to bypasses discovered i...
PT-2017-5759
Name of the Vulnerable Software and Affected Versions: validator module versions prior to 1.1.0 Description: The issue allows remote attackers to bypass the cross-site scripting XSS filter. This is achieved via vectors related to UI redressing, which is a technique used to trick users into...
PT-2017-6396
Name of the Vulnerable Software and Affected Versions validator versions prior to 2.0.0 Description The issue allows remote attackers to bypass the cross-site scripting XSS filter via hex-encoded characters. This may result in a cross-site scripting vulnerability. The xss function removes the wor...