Mozilla Bleach Cross-Site Scripting Vulnerability

Mozilla Bleach is an HTML cleanup library from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Mozilla Bleach versions prior to 3.11. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...

The vulnerability of Microsoft Hyper-V’s hardware virtualization technology and the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of Microsoft Hyper-V hardware virtualization technology and the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Design/Logic Flaw

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 inclusive, versions between 4.9.0 and 4.32.0 inclusive, and versio...

Oracle Weblogic Server Remote Code Execution (CVE-2019-2888)

An External Entity Injection vulnerability exists in Oracle Weblogic. This vulnerability is due to insufficient validation of XML data. A remote attacker could exploit this vulnerability by sending malicious XML data to the target server. Successful exploitation of this vulnerability could result...

Selesta Visual Access Manager Cross-Site Scripting Vulnerability (CNVD-2020-14669)

Selesta Visual Access Manager VAM is the Selesta Visual Access Manager. A cross-site scripting vulnerability exists in Selesta Visual Access Manager VAM versions 4.15.0 through 4.29. The vulnerability stems from a lack of proper validation of client data by the web application. An attacker can...

IBL Online Weather Cross-Site Scripting Vulnerability

IBL Online Weather is a weather service software from iblsoft. A cross-site scripting vulnerability exists in IBL Online Weather versions prior to 4.3.5a. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerabilit...

Go SSH Denial of Service Vulnerability

Go SSH is an extremely clean ssh tool developed using the go language for remotely managing linux, unix and other machines. Go SSH suffers from a denial of service vulnerability that stems from a networked system or product that does not properly validate incoming data, which can be exploited by ...

DNN cross-site scripting vulnerability (CNVD-2020-13479)

DNN also known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. DNN 9.4.4 and previous versions of cross-site scripting vulnerability. The...

MGASA-2020-0097 Updated ipmitool packages fix security vulnerability

Updated ipmitool package fix security vulnerability: Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side CVE-2020-5208...

WordPress Modula Image Gallery Cross-Site Scripting Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language.Modula Image Gallery is used in one of the gallery gallery plugin. A cross-site scripting vulnerability exists in WordPress Modula Image Gallery versions prior to 2.2.5. The vulnerability stems from ...

Western Digital My Cloud Cross-Site Scripting Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. A cross-site scripting vulnerability exists in Western Digital mycloud.com Web version versions prior to 2.2.0-134. The vulnerability stems from the WEB application lacking proper validation of client data. An...

CVE-2020-8860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O8.x, P9.0, Q10.0 devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The...

Cross-Site Scripting (XSS)

reveal.js is vulnerable to cross-site scripting XSS attacks. It is possible because it does not restrict the data such as code, description and callback from arbitrary origins and allows the SetupPostMessage to invoke methods without validating the data.method against any blacklisting, directly...

SimpleSAMLphp cross-site scripting vulnerability (CNVD-2020-10607)

SimpleSAMLphp is a PHP authentication application that implements the SAML 2.0 Service Provider and Identity Provider features. A cross-site scripting vulnerability exists in SimpleSAMLphp. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attack...

Serendipity freetag cross-site scripting vulnerability

Serendipity is a PHP-based blogging system from the Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site scripting vulnerability exists in Serendipity freetag plugin versions prior to 3.30. The vulnerability stems from a lack of proper...

chromium-browser: Insufficient data validation in streams

Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Nextcloud iOS Cross-Site Scripting Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A cross-site scripting vulnerability exists in Nextcloud iOS. The vulnerability stems from a lack of proper validation of client-side data by the web...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2020-10427)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. A cross-site scripting vulnerability exists in Revive Adserver. The vulnerability stems from the lack of prope...

Bludit Cross-Site Scripting Vulnerability (CNVD-2020-13197)

Bludit is an open source, lightweight blog content management system CMS. A cross-site scripting vulnerability exists in Bludit version 3.10.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute...

IBM Watson IoT Message Gateway Code Execution Vulnerability

IBM Watson IoT Message Gateway is an IoT solution. A security vulnerability exists in IBM Watson IoT Message Gateway. The vulnerability arises from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...