Mozilla Firefox Security Advisory (MFSA2013-87) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

AMD Graphics Driver 信息泄露漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from an information disclosure vulnerability that stems from a potential security hole in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalatio...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

Intel Core Processors 缓冲区错误漏洞

Intel Core Processors is an Intel Core family of central processing units CPUs from Intel Corporation USA. Intel Core Processors suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated...

Intel® Core™ Processors with Radeon™ RX Vega M GL Graphics Advisory

Summary: Potential security vulnerabilities in some Intel® Core™ processors with Radeon™ RX Vega M GL integrated graphics may allow escalation of privilege, denial of service or information disclosure. Intel and AMD are releasing driver updates to mitigate these potential vulnerabilities...

Intel Core Processors 信息泄露漏洞

Intel Core Processors is an Intel Core family of central processing units CPUs from Intel Corporation USA. A security vulnerability exists in Intel Core Processors with Radeon RX Vega M GL Graphics, which stems from a potential security flaw in the integrated graphics of Intel Core processors tha...

GHSA-3FR8-MWPP-8H9P Cross-site scripting in TileServer GL

An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...

Cross-site scripting in TileServer GL

An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...

Tileserver-gl 3.0.0 - (key) Reflected Cross-Site Scripting Vulnerability

Exploit Title: Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting XSS Exploit Author: Akash Chathoth Vendor Homepage: http://tileserver.org/ Software Link: https://github.com/maptiler/tileserver-gl Version: versions alertdocument.domain 0day.today 2021-10-22...

Tileserver-gl 3.0.0 Cross Site Scripting

Exploit Title: Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting XSS Date: 15/04/2021 Exploit Author: Akash Chathoth Vendor Homepage: http://tileserver.org/ Software Link: https://github.com/maptiler/tileserver-gl Version: versions alertdocument.domain...

Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting (XSS)

Exploit Title: Tileserver-gl 3.0.0 - 'key' Reflected Cross-Site Scripting XSS Date: 15/04/2021 Exploit Author: Akash Chathoth Vendor Homepage: http://tileserver.org/ Software Link: https://github.com/maptiler/tileserver-gl Version: versions alertdocument.domain...

@frostoven/alkalurops (>=1.28.2 <=1.28.5), @h5web/app (>=0.1.0-beta.1 <=4.2.0-beta.1) +14 more potentially affected by unknown CVE via d3-color (=3.0.1)

d3-color NPM version =3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on d3-color and may be impacted: - @frostoven/alkalurops =1.28.2, =0.1.0-beta.1, =0.1.0-beta.0, =0.1.1, =1.0.1, =0.2.0, =0.1.6, =0.1.1, =0.2.0, =0.2.0, =0.0.2, =0.3.0, =0.1.0,...

gl-consulting.ru Cross Site Scripting vulnerability OBB-1214853

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Cross-site Scripting (XSS)

tileserver-gl is vulnerable to cross-site scripting XSS. The vulnerability exists because the key GET parameter is not escaped properly, allowing an attacker to inject malicious script and get it executed when a user visits the application's main page...

TileServer GL Cross-Site Scripting Vulnerability

TileServer GL is an open source map server for vector blocks from the MapTiler team. A cross-site scripting vulnerability exists in the server.js file in TileServer GL 3.0.0 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. ...

CVE-2020-15500

An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...