6 matches found
CVE-2022-28367
OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets CSS content...
CVE-2018-21033
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets CSS token sequence. Hitachi Command Suite includes...
CVE-2015-4497
Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets CSS toke...
CVE-2012-1247
Cross-site scripting XSS vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML by leveraging support for Cascading Style Sheets CSS expressions...
Google Chrome Multiple Information Disclosure Vulnerabilities (Linux)
The host is installed with Google Chrome and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultinfodiscvulnlin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome Multiple Information Disclosure Vulnerabilities Linux Authors: Rachana...