43 matches found
CVE-2007-0148: Undefined Security Weakness
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
6.8CVSS6.4AI score0.06272EPSS
SaveExploits1References1
Apple OmniWeb Format string vulnerability
Format string vulnerability in javascript alert function...
6.8CVSS1.6AI score0.06272EPSS
SaveExploits1References1Affected Software1
CVE-2006-0070
Drupal allows remote attackers to conduct cross-site scripting XSS attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert function. NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when "Filtere...
4.3CVSS5.8AI score0.01059EPSS
SaveExploits1References1
20