Cross site scripting

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag...

CVE-2020-15930

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag...

CVE-2020-15930

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag...

CVE-2020-15930: Improper Neutralization of Input During Web Page Generation

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag...

PT-2020-14723

Name of the Vulnerable Software and Affected Versions Joplin desktop versions 1.0.190 through 1.0.245 Description The issue allows for arbitrary code execution via a malicious HTML embed tag. This is an XSS issue that affects Joplin desktop, enabling potential attackers to execute arbitrary code...

openSUSE Security Update : php7 (openSUSE-2020-1356)

This update for php7 fixes the following issues : - CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

PT-2020-21540

Name of the Vulnerable Software and Affected Versions lazysizes versions prior to 5.2.1-rc1 Description The issue affects the video-embed plugin of lazysizes, which fails to properly sanitize certain attributes, including data-vimeo, data-vimeoparams, data-youtube, and data-ytparams. This oversig...

Phishing Attacks

firefox is vulnerable to phishing attacks. The vulnerability exists through a X-Frame-Options bypass using object or embed tags...

Mozilla: X-Frame-Options bypass using object or embed tags

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...

Mozilla: X-Frame-Options bypass using object or embed tags

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...

Mozilla: X-Frame-Options bypass using object or embed tags

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...

CVE-2020-15648

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...

CVE-2020-15648

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...

CVE-2020-15648

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...

Spoofing

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...

CVE-2020-15648

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird 78 and Firefox 78.0.2...

PT-2020-21613

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 78.0.2 Firefox Extended Support Release 78.0.2esr ESR Description The issue involves an X-Frame-Options bypass using object or embed tags. This allows for potential security risks. No information is provided about the...

PT-2020-21612

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 78.0.2 Firefox Extended Support Release 78.0.2esr ESR Description The issue involves an X-Frame-Options bypass using object or embed tags. This could potentially allow malicious actors to bypass security restrictions...

wagtail-stacks-embed (>=0.1.0, <=0.3.0) potentially affected by CVE-2020-15118 via wagtail (1.7.0)

wagtail PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-stacks-embed =0.1.0, =0.3.0 Source cves: CVE-2020-15118 Source advisory: OSV:GHSA-2473-9HGQ-J7XW...

PT-2020-22733

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 78.0.2 Firefox Extended Support Release 78.0.2esr ESR Description The issue involves an X-Frame-Options bypass using object or embed tags. This allows for potential security risks. There is no information provided about...