Lucene search
+L

69 matches found

Prion
Prion
•added 2022/12/31 11:15 a.m.•21 views

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in vova07 Yii2 FileAPI Widget up to 0.1.8. It has been declared as problematic. Affected by this vulnerability is the function run of the file actions/UploadAction.php. The manipulation of the argument file leads to cross site scripting. The...

5.8CVSS6AI score0.00548EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2022/12/31 10:00 a.m.•103 views

CVE-2017-20158

The CVE-2017-20158 entry concerns vova07 Yii2 FileAPI Widget up to 0.1.8. The vulnerability affects the run() function in actions/UploadAction.php, where manipulation of the file parameter enables a Cross-Site Scripting (XSS) vulnerability. It can be exploited remotely. A fix is available in vers...

6.1CVSS3.5AI score0.00548EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/31 12:00 a.m.•16 views

PT-2022-8023 · Unknown · Vova07 Yii2 Fileapi Widget

Name of the Vulnerable Software and Affected Versions: vova07 Yii2 FileAPI Widget versions up to 0.1.8 Description: A vulnerability was found in the vova07 Yii2 FileAPI Widget, which has been declared as problematic. The issue affects the run function of the file actions/UploadAction.php. The...

6.1CVSS4.2AI score0.00548EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/31 12:00 a.m.•4 views

CVE-2017-20158: Improper Neutralization of Input During Web Page Generation

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in vova07 Yii2 FileAPI Widget up to 0.1.8. It has been declared as problematic. Affected by this vulnerability is the function run of the file actions/UploadAction.php. The manipulation of the argument file leads to cross site scripting. The...

6.1CVSS3.7AI score0.00548EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/04/09 12:00 a.m.•47 views

RHEL 6 : chromium-browser (RHSA-2019:0708)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0708 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 73.0.3683.75. Security Fixes:...

9.3CVSS7.6AI score0.09259EPSS
SaveExploits7References34
RedHat Linux
RedHat Linux
•added 2019/04/08 7:48 a.m.•16 views

chromium-browser: Use after free in FileAPI

An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page...

9.3CVSS7.8AI score0.09088EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
•added 2019/03/14 12:00 a.m.•262 views

Google Chrome < 73.0.3683.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 73.0.3683.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201903stable-channel-update-for-desktop12 advisory. - Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a...

9.3CVSS8.1AI score0.09259EPSS
SaveExploits7References37
Tenable Nessus
Tenable Nessus
•added 2018/08/23 12:00 a.m.•26 views

Google Chrome < 66.0.3359.117 Multiple Vulnerabilities

Binary data 700356.pasl...

8.8CVSS7.3AI score0.03564EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/04/25 12:00 a.m.•40 views

FreeBSD : chromium -- vulnerability (36ff7a74-47b1-11e8-a7d6-54e1ad544088)

Google Chrome Releases reports : 62 security fixes in this release : - 826626 Critical CVE-2018-6085: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-28 - 827492 Critical CVE-2018-6086: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-30 - 813876 High...

8.8CVSS7AI score0.09186EPSS
SaveExploits6References36
Rows per page
Query Builder