422 matches found
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , … because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype. Recent assessments: ANHKWAR at Ma...
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...
CVE-2019-11358
CVE-2019-11358 is a prototype pollution vulnerability in jQuery (before 3.4.0) where mishandling of extend(true, {}, ...) can extend Object.prototype if an unsanitized source object has an enumerable proto property. The Core issue is triggered when a polluted prototype is introduced via nested ob...
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...
CVE-2018-1000813
Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Execution of JavaScript from an unexpected source.. This attack appear to be exploitable via A user must be directed to an...
CVE-2018-1000813
Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Execution of JavaScript from an unexpected source.. This attack appear to be exploitable via A user must be directed to an...
Cross site scripting
Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Execution of JavaScript from an unexpected source.. This attack appear to be exploitable via A user must be directed to an...
CVE-2018-1000813
Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Execution of JavaScript from an unexpected source.. This attack appear to be exploitable via A user must be directed to an...
CVE-2018-1000813
The CVE concerns Backdrop CMS versions up to 1.11.0, where a Cross Site Scripting (XSS) vulnerability exists in the sanitization of custom class names used on blocks and layouts, potentially enabling JavaScript execution from an unexpected source. The attack requires a user to be directed to an a...
CVE-2018-1000813
Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Execution of JavaScript from an unexpected source.. This attack appear to be exploitable via A user must be directed to an...
CVE-2018-1000813: Improper Neutralization of Input During Web Page Generation
Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Execution of JavaScript from an unexpected source.. This attack appear to be exploitable via A user must be directed to an...
PT-2018-9537
Name of the Vulnerable Software and Affected Versions Backdrop CMS versions prior to 1.11.1 Description The issue is related to a Cross Site Scripting XSS vulnerability in the sanitization of custom class names used on blocks and layouts, which can result in the execution of JavaScript from an...
PT-2018-3601
Name of the Vulnerable Software and Affected Versions WebKit affected versions not specified Description The issue is related to the backdrop-filter function of the CSS display module in WebKit, which is associated with high resource usage when processing div elements. An attacker can exploit thi...
Apple iOS 11.x - Webkit Filter Backdrop DoS Vulnerability
Document Title: =============== Apple iOS 11.x - Webkit Filter Backdrop DoS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2150 View Video: https://www.youtube.com/watch?v=oKtF9q15Unw Release Date: ============= 2018-09-19 Vulnerability Laboratory ID...
Apple iOS 11.x - Webkit Filter Backdrop DoS Vulnerability
Document Title: =============== Apple iOS 11.x - Webkit Filter Backdrop DoS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2150 View Video: https://www.youtube.com/watch?v=oKtF9q15Unw Release Date: ============= 2018-09-18 Vulnerability Laboratory ID...
Stored Cross-Site Scripting Vulnerability in Backdrop CMS Published Article Pages
Backdrop CMS is a foreign open source, free CMS system for small and medium-sized businesses and non-profit organizations. A stored cross-site scripting vulnerability exists in the Backdrop CMS publish article page. An attacker can insert malicious js code into the page to obtain user cookies and...