Lucene search
+L

207 matches found

Veracode
Veracode
•added 2020/01/09 12:38 a.m.•56 views

Cross-site Scripting (XSS)

hibernate-validator is vulnerable to cross-site scripting XSS. The vulnerability exists as the SafeHtml annotation from SafeHtmlValidator does not properly sanitize payloads in HTML comments...

6.1CVSS0.8AI score0.02157EPSS
SaveExploits0References22Affected Software1
OSV
OSV
•added 2020/01/08 5:01 p.m.•212 views

GHSA-M8P2-495H-CCMH The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS7.2AI score0.02157EPSS
SaveExploits0References27
Github Security Blog
Github Security Blog
•added 2020/01/08 5:01 p.m.•121 views

The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS1.8AI score0.02157EPSS
SaveExploits0References27Affected Software2
OSV
OSV
•added 2019/11/08 3:15 p.m.•12 views

DEBIAN-CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.1CVSS6.4AI score0.02157EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/08 3:15 p.m.•42 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.1CVSS5.8AI score
SaveExploits0References19
NVD
NVD
•added 2019/11/08 3:15 p.m.•35 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.6AI score0.02157EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2019/11/08 3:15 p.m.•38 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.7AI score0.02157EPSS
SaveExploits0References2
Prion
Prion
•added 2019/11/08 3:15 p.m.•31 views

Design/Logic Flaw

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

4.3CVSS7.2AI score0.02157EPSS
SaveExploits0References14Affected Software175
OSV
OSV
•added 2019/11/08 3:15 p.m.•18 views

UBUNTU-CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.7AI score0.02157EPSS
SaveExploits0References3
Mend
Mend
•added 2019/11/08 2:46 p.m.•1 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.9CVSS0.02157EPSS
SaveExploits0References25
Cvelist
Cvelist
•added 2019/11/08 2:46 p.m.•58 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS7.4AI score0.02157EPSS
SaveExploits0References18
Debian CVE
Debian CVE
•added 2019/11/08 2:46 p.m.•101 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS7AI score0.02157EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/08 12:00 a.m.•6 views

CVE-2019-10219: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS6.5AI score0.02157EPSS
SaveExploits0References18
RedhatCVE
RedhatCVE
•added 2019/08/28 1:21 p.m.•53 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

6.5CVSS1.7AI score0.02157EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/03/27 12:00 a.m.•20 views

PT-2019-6379

Name of the Vulnerable Software and Affected Versions Hibernate Validator affected versions not specified Description The issue is related to the SafeHtml validator in Hibernate Validator, which fails to properly sanitize HTML content. This can lead to an XSS attack when an attacker sends malicio...

6.5CVSS6.6AI score0.02157EPSS
SaveExploits0References48
RedHat Linux
RedHat Linux
•added 2018/12/11 2:12 p.m.•16 views

hibernate-validator: Privilege escalation when running under the security manager

It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...

7CVSS6.8AI score0.00482EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2018/10/18 12:00 a.m.•99 views

RHEL 7 : Satellite 6.4 (RHSA-2018:2927)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2927 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitorin...

9.8CVSS6.3AI score0.37721EPSS
SaveExploits9References143
RedHat Linux
RedHat Linux
•added 2018/10/16 5:38 p.m.•267 views

Important: Red Hat Security Advisory: Satellite 6.4 security, bug fix, and enhancement update

An update is now available for Red Hat Satellite 6.4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

9.8CVSS6.2AI score0.37721EPSS
SaveExploits9References115
RedHat Linux
RedHat Linux
•added 2018/10/16 5:38 p.m.•14 views

hibernate-validator: Privilege escalation when running under the security manager

It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...

7CVSS6.8AI score0.00482EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2018/09/24 10:11 p.m.•14 views

hibernate-validator: Privilege escalation when running under the security manager

It was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an...

7CVSS6.8AI score0.00482EPSS
SaveExploits0References4
Rows per page
Query Builder