1059 matches found
CVE-2023-1244 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1243
CVE-2023-1243 describes a Stored Cross-site Scripting (XSS) vulnerability in the open‑source knowledge base software answerdev/answer prior to version 1.0.6. Root cause: user input stored by the application is displayed without proper sanitization, enabling script injection. Affected product: ans...
answer 跨站脚本漏洞
Answer is an open source knowledge-based community software. You can quickly use it to build Q&A communities for your products, customers, teams and more. Answer has a cross-site scripting vulnerability in versions prior to 1.0.6. The vulnerability stems from the fact that when answering added ne...
CVE-2023-1242
CVE-2023-1242: Cross-site Scripting (XSS) stored in the Answer software (github.com/answerdev/answer) prior to version 1.0.6. Affected component is likely user input that is not properly sanitized in answers/tags descriptions, enabling injected JavaScript via stored payloads. Documented in multip...
CVE-2023-1243 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1243 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1244 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
Avoid The Randomness From The Sky
This is a plea for cryptography specification authors. If your protocol uses randomness, please make it a deterministic function that takes a fixed-size string of random bytes , and publish known-answer tests for it. This whole issue could really be just the paragraph above, but I feel like I nee...
answer cross-site scripting vulnerability (CNVD-2023-31164)
answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in versions of answer prior to 1.0.5. The vulnerability stems from a lack of effective filtering and escaping of user-supplied data, which can be exploited by attackers to cause cross-site...
K98528405: BIG-IP BIND vulnerability CVE-2018-5740
Security Advisory Description A flaw in the "deny-answer-aliases" feature can cause an INSIST assertion failure in named. CVE-2018-5740 Impact A flaw in a rarely used BIND feature can cause an assertion failure in named. As a result, the bind process restarts. Security Advisory Status F5 Product...
CVE-2023-0934
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
CVE-2023-0934: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
answer 跨站脚本漏洞
answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in versions of answer prior to 1.0.5. The vulnerability stems from a lack of effective filtering and escaping of user-supplied data, which can be exploited by attackers to cause cross-site...
PT-2023-16622 · Answerdev · Answer
Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.5 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository answerdev/answer. Cross-site Scripting XSS is a type of security vulnerability that occurs wh...
CVE-2023-0934
The CVE-2023-0934 entry describes a Cross-site Scripting (XSS) vulnerability stored in the GitHub project answerdev/answer, present in versions prior to 1.0.5. The vulnerability is categorized as stored XSS, indicating that user-supplied input is not properly filtered/escaped, enabling injected s...
CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
SUSE CVE-2010-4531
Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service crash and possibly execute arbitrary code via a...