Lucene search
+L

16243 matches found

CNVD
CNVD
added 2015/12/24 12:00 a.m.8 views

Drupal Block Class Module HTML Injection Vulnerability

Drupal is the Drupal community maintained by a set of free, open source content management system developed in PHP. Block Class is one of the administrator through the Block configuration interface to add CSS to any Block module . An HTML injection vulnerability exists in Drupal Block Class modul...

7.6AI score
SaveExploits0References1
FreeBSD
FreeBSD
added 2015/12/22 12:00 a.m.43 views

Bugzilla security issues

Bugzilla Security Advisory During the generation of a dependency graph, the code for the HTML image map is generated locally if a local dot installation is used. With escaped HTML characters in a bug summary, it is possible to inject unfiltered HTML code in the map file which the CreateImagemap...

4.7CVSS5.9AI score0.02169EPSS
SaveExploits2References2
Prion
Prion
added 2015/12/21 11:59 a.m.20 views

Cross site scripting

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF19 and 8.5.0 through CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.3CVSS5.9AI score0.01171EPSS
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm
added 2015/12/21 12:00 a.m.33 views

Music Cloud 1.3 Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

SaveExploits0
Prion
Prion
added 2015/12/17 7:59 p.m.27 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via 1 global parameters, 2 smart class parameters, or 3 smart variables in the a host or b hostgroup edit forms...

4.3CVSS5.9AI score0.01846EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2015/12/15 9:59 p.m.15 views

Cross site scripting

Cross-site scripting XSS vulnerability in synnefoclient in Synnefo Internet Management Software IMS 2015 allows remote attackers to inject arbitrary web script or HTML via the planname parameter to packagehistory/listusagesdata...

4.3CVSS6.1AI score0.01906EPSS
SaveExploits2References3Affected Software1
Debian
Debian
added 2015/12/15 2:20 a.m.103 views

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

10CVSS1.5AI score0.03058EPSS
SaveExploits0
Debian
Debian
added 2015/12/15 2:20 a.m.98 views

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

10CVSS6.3AI score0.03058EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/12/15 12:00 a.m.41 views

Debian DSA-3418-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-6788 A type confusion issue was discovered in the handling of extensions. - CVE-2015-6789 cloudfuzzer discovered a use-after-free issue. - CVE-2015-6790 Inti De Ceukelaire discovered a way to inject HTML into...

10CVSS8.1AI score0.03058EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2015/12/14 12:00 a.m.13 views

The vulnerability of the ColdFusion interpreter allows attackers to inject any web script or HTML code.

The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web script or HTML code remotely...

4.3CVSS5.5AI score0.03119EPSS
SaveExploits0References2
OSV
OSV
added 2015/12/14 12:00 a.m.39 views

DSA-3418-1 chromium-browser - security update

Bulletin has no description...

10CVSS9.1AI score0.03058EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2015/12/14 12:00 a.m.37 views

Debian Security Advisory DSA 3418-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-6788 A type confusion issue was discovered in the handling of extensions. CVE-2015-6789 cloudfuzzer discovered a use-after-free issue. CVE-2015-6790 Inti De Ceukelaire discovered a way to inject HTML into serialize...

10CVSS0.3AI score0.03058EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/12/13 12:00 a.m.11 views

PHP-Fusion 'administration/robots.php' HTML Injection Vulnerability

PHP-Fusion is an open source lightweight content management system based on MySql and PHP. An HTML injection vulnerability exists in PHP-Fusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

5.4CVSS6.9AI score0.01234EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2015/12/13 12:00 a.m.28 views

Debian: Security Advisory (DSA-3418-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.3AI score0.03058EPSS
SaveExploits0References3
Hacker One
Hacker One
added 2015/12/10 4:04 p.m.55 views

Coinbase: HTML injection in apps user review

just watch this video https://www.dropbox.com/s/360cytluyiw2ym9/HTMLI.mp4?dl=0 this about full fake login exploit https://www.youtube.com/watch?v=5iRylyJTzWc...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/12/10 12:00 a.m.44 views

Debian DSA-3415-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-1302 Rub Wu discovered an information leak in the pdfium library. - CVE-2015-6764 Guang Gong discovered an out-of-bounds read issue in the v8 JavaScript library. - CVE-2015-6765 A use-after-free issue was...

10CVSS8AI score0.04692EPSS
SaveExploits4References48
OSV
OSV
added 2015/12/09 12:00 a.m.33 views

DSA-3415-1 chromium-browser - security update

Bulletin has no description...

10CVSS9.4AI score0.04692EPSS
SaveExploits4
seebug.org
seebug.org
added 2015/12/09 12:00 a.m.22 views

Google Chrome HTML注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/12/09 12:00 a.m.57 views

Debian Security Advisory DSA 3415-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-1302 Rub Wu discovered an information leak in the pdfium library. CVE-2015-6764 Guang Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2015-6765 A use-after-free issue was discovered in...

10CVSS1.4AI score0.04692EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2015/12/08 12:00 a.m.48 views

Debian: Security Advisory (DSA-3415-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.04692EPSS
SaveExploits4References3
Rows per page
Query Builder