Cross site scripting

An improper neutralization of script-related HTML tags in a web page vulnerability CWE-80 in FortiAuthenticator versions 6.4.0 through 6.4.4, 6.3.0 through 6.3.3, all versions of 6.2 and 6.1 may allow a remote unauthenticated attacker to trigger a reflected cross site scripting XSS attack via the...

CVE-2023-1726

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Proliz OBS allows Stored XSS for an authenticated user.This issue affects OBS: before 23.04.01...

[SECURITY] Fedora 37 Update: rubygem-actionview-7.0.4.3-1.fc37

Simple, battle-tested conventions and helpers for building web pages...

Google Chrome 安全漏洞

Google Chrome is a web browser from the American company Google Google. A security vulnerability exists in versions prior to Google Chrome 112.0.5615.49. An attacker exploited the vulnerability to bypass file access restrictions via specially crafted HTML pages...

[SECURITY] Fedora 38 Update: rubygem-actionview-7.0.4.3-1.fc38

Simple, battle-tested conventions and helpers for building web pages...

Virames Vira-Investing 安全漏洞

Virames Vira-Investing is an application from Virames, Inc. A security vulnerability exists in Virames Vira-Investing prior to version 1.0.84.86, which stems from an improper neutralization of HTML tags in Vira-Investing web pages...

Security Bulletin: IBM Watson CloudPak for Data Data Stores are vulnerable to web pages stored locally which can be read by another user on the system

Summary IBM Watson CP4D Data Stores allows web pages to be stored locally which can be read by another user on the system. Vulnerability Details CVEID:CVE-2023-27545 DESCRIPTION: IBM Watson CP4D Data Stores allows web pages to be stored locally which can be read by another user on the system. CVS...

Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of USD...

Design/Logic Flaw

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329...

CVE-2020-4556 IBM Financial Transaction Manager information disclosure

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329...

IBM Financial Transaction Manager for High Value Payments for Multi-Platform 安全漏洞

IBM Financial Transaction Manager for High Value Payments for Multi-Platform FTM HVP is a financial transaction manager for multi-platform from International Business Machines IBM. The product is primarily used to monitor, track and report on financial payments and transactions. A security...

Google Chrome 安全漏洞

Google Chrome is a web browser from the American company Google Google. A security vulnerability exists in versions prior to Google Chrome 111.0.5563.64. An attacker exploited the vulnerability to spoof iframe sources via specially crafted HTML pages...

[SECURITY] Fedora 36 Update: php-8.1.16-1.fc36

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Attackers Flood NPM Repository with Over 15,000 Spam Packages Containing Phishing Links

In what's a continuing assault on the open source ecosystem, over 15,000 spam packages have flooded the npm repository in an attempt to distribute phishing links. "The packages were created using automated processes, with project descriptions and auto-generated names that closely resembled one...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177 that originates from memory reuse after release in SwiftShader. An attacker exploits the vulnerability to cause heap corruption via specially...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177, which originates from memory reuse after release in Video. An attacker exploits the vulnerability to cause heap corruption via specially crafte...

K88126845: BIG-IP APM web pages may be indexed by search engines

Security Advisory Description This issue occurs when all of the following conditions are met: Users connect to the BIG-IP APM system through the internet. The BIG-IP APM system is reachable by search engines. Impact BIG-IP APM web pages may be enumerated and other data may be disclosed. Symptoms ...

SUSE CVE-2020-27778

A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service...

Security Bulletin: IBM CICS TX Standard is vulnerable to allowing web pages to be stored locally which can then be accessed by other users on the system (CVE-2022-34312).

Summary IBM CICS TX Standard could allow web pages to be sored locally which can then be accessed by other users on the system. The fix removes this vulnerability CVE-2022-34312 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34312 DESCRIPTION: IBM CICS TX allows web pages to be...

Security Bulletin: IBM CICS TX Advanced is vulnerable to allowing web pages to be stored locally which can then be read by other users on the system (CVE-2022-34312).

Summary IBM CICS TX Advanced could allow web pages to be stored locally which can then be read by other users on the system. The fix removes this vulnerability CVE-2022-34312 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34312 DESCRIPTION: IBM CICS TX allows web pages to be stor...