Lucene search
K

7 matches found

Fedora
Fedora
added 2024/03/07 10:33 p.m.19 views

[SECURITY] Fedora 40 Update: liblayout-0.2.10-36.fc40

LibLayout is a layouting framework. It is based on the Cascading StyleSheets standard. The layouting expects to receive its content as a DOM structure although it does not rely on the W3C-DOM API...

8.8CVSS6.8AI score0.46427EPSS
Exploits3
OSV
OSV
added 2022/07/18 5:15 p.m.2 views

CVE-2022-2435

The AnyMind Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1. This is due to missing nonce protection on the createDOMStructure function found in the /anymind-widget-id.php file. This makes it possible for unauthenticated attackers to...

8.8CVSS5.8AI score0.00717EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/07/18 4:13 p.m.12 views

CVE-2022-2435 AnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting

The AnyMind Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1. This is due to missing nonce protection on the createDOMStructure function found in the /anymind-widget-id.php file. This makes it possible for unauthenticated attackers to...

8.8CVSS8.6AI score0.00717EPSS
Exploits0References3
Prion
Prion
added 2018/06/12 3:29 p.m.16 views

Design/Logic Flaw

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 Java 7.30, 7.31, 7.40...

5CVSS7.5AI score0.00292EPSS
Exploits0References3Affected Software4
CVE
CVE
added 2018/06/12 3:0 p.m.41 views

CVE-2018-2424

CVE-2018-2424 affects SAP Hana Database (1.00, 2.00), SAP UI5 (1.00; Java) with SAP UI5 versions 7.30–7.50 (and 7.50, 7.51, 7.52) and SAP UI for SAP NetWeaver 7.00 (2.0). The root cause is failure to validate user input before adding it to the DOM, enabling attacker-supplied JavaScript to be inje...

9.8CVSS7.5AI score0.00292EPSS
Exploits0References3Affected Software4
Cvelist
Cvelist
added 2018/06/12 3:0 p.m.12 views

CVE-2018-2424

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 Java 7.30, 7.31, 7.40...

9.8CVSS9.6AI score0.00292EPSS
Exploits0References3
The Hacker News
The Hacker News
added 2010/11/24 1:51 a.m.4 views

Web Crawler : Web Application Crawler - New Release

Web Crawler is a open source application that is based on the WebEngine library. WebEngine is the set of tools for performing black-box web-sites testing and other similar tasks. It provides tools means for reception of documents from a web-server, parse HTML pages, their comparisons, search...

6.5AI score
Exploits0
Rows per page
Query Builder