expat: heap-based buffer over-read via crafted XML input

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber then resulted in a heap-based buffer over-read...

grafana: XSS via column.title or cellLinkTooltip

A flaw was found in grafana. A XSS is possible in table-panel via column.title or cellLinkTooltip...

grafana: XSS vulnerability via a column style on the "Dashboard > Table Panel" screen

A flaw was found in grafana. An incomplete fix for CVE-2018-12099 allows for a XSS via a column style on the "Dashboard Table Panel" screen...

sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations

A NULL pointer dereference was found in SQLite in the way it executes select statements with column optimizations. An attacker who is able to execute SQL statements can use this flaw to crash the application...

CVE-2020-7734

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

PYSEC-2020-227

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

Cross site scripting

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

PYSEC-2020-227

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

CVE-2020-7734

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

CVE-2020-7734

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

PT-2020-19751

Name of the Vulnerable Software and Affected Versions cabot versions prior to 0.11.16 Description The issue is related to Cross-site Scripting XSS via the Endpoint column. Recommendations For versions prior to 0.11.16, update to version 0.11.16 or later to resolve the issue...

CVE-2020-7734: Improper Neutralization of Input During Web Page Generation

All versions of package cabot are vulnerable to Cross-site Scripting XSS via the Endpoint column...

CloudBees Jenkins Description Column Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

The vulnerabilities of the alter.c and build.c components of the SQLite database management system allow a hacker to rename any columns in the table.

The vulnerability of the alter.c and build.c components of the SQLite database management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to rename any columns in the table at will...

CVE-2020-2266

Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

Cross site scripting

Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2020-2266

Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2020-2266

Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2020-2266: Improper Neutralization of Input During Web Page Generation

Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

Stored XSS vulnerability in description-column-plugin

description-column-plugin 1.3 and earlier does not escape the job description in the column tooltips. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. As of publication of this advisory, there is no fix...