3 matches found
CVE-2024-43370
gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting XSS injection if .po dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this...
7.2CVSS5.9AI score0.0038EPSS
SaveExploits0
Adobe Shockwave Player Memory Corruption Vulnerability (CNVD-2019-10621)
Adobe Shockwave Player is a multimedia player product from the American company Adobe. The product is able to Adobe Director a multimedia production software produced by the application published to the Internet, installed with the Shockwave plug-in browser can be viewed. A memory corruption...
10CVSS7.4AI score0.05185EPSS
SaveExploits0References1
20