Lucene search
+L

233 matches found

Redos
Redos
added 2021/12/24 12:0 a.m.5 views

ROS-2-2186

2.2186 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS8.3AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.8 views

ROS-2-1888

2.1888 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS9.3AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.22 views

ROS-2-963

2.963 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS9.3AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.19 views

ROS-2-862

2.862 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS9.3AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.5 views

ROS-2-2097

2.2097 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS8.7AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.9 views

ROS-2-1936

2.1936 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS9.2AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.11 views

ROS-2-1872

2.1872 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS9.2AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.17 views

ROS-2-1213

2.1213 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS9.8AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.9 views

ROS-2-1855

2.1855 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS9.2AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.28 views

ROS-2-558

2.558 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

9.2AI score0.03582EPSS
SaveExploits1
Prion
Prion
added 2021/12/13 6:15 p.m.42 views

Hardcoded credentials

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

6.8CVSS6.7AI score0.02456EPSS
SaveExploits0References14Affected Software8
AlpineLinux
AlpineLinux
added 2021/12/13 6:5 p.m.83 views

CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS7.8AI score0.02456EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/11/17 9:58 p.m.125 views

HTML comments vulnerability allowing to execute JavaScript code

Affected packages The vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. Impact A potential vulnerability has been discovered in CKEditor 4 HTML processing core module. The vulnerability allowed to inject malformed comments HTML...

8.2CVSS2.7AI score0.0147EPSS
SaveExploits0References8Affected Software2
NVD
NVD
added 2021/11/17 8:15 p.m.20 views

CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

8.2CVSS0.0147EPSS
SaveExploits0References6
OSV
OSV
added 2021/11/17 8:15 p.m.1 views

DEBIAN-CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

5.4CVSS6.9AI score0.0147EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/17 8:15 p.m.24 views

CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

5.4CVSS5.2AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2021/11/17 8:15 p.m.36 views

CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

8.2CVSS6.7AI score0.0147EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/11/17 12:0 a.m.6 views

PT-2021-6670 · Unknown +1 · Ckeditor 4 +1

Name of the Vulnerable Software and Affected Versions: CKEditor 4 versions prior to 4.17.0 Description: A vulnerability has been discovered in the core HTML processing module of CKEditor 4, which may affect all plugins used by the editor. This issue allows an attacker to inject malformed comments...

8.2CVSS6.2AI score0.0147EPSS
SaveExploits0References22
RubySec
RubySec
added 2021/11/17 12:0 a.m.7 views

HTML comments vulnerability allowing to execute JavaScript code

Affected packages The vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. Impact A potential vulnerability has been discovered in CKEditor 4 HTML processing core module. The vulnerability allowed to inject malformed comments HTML...

8.2CVSS6.9AI score0.0147EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.7 views

The vulnerability of the scene handler in Windows operating systems allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of scene handlers in Windows operating systems is related to writing beyond buffer boundaries in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service to fail through a specially created web page...

9.3CVSS8AI score0.3067EPSS
SaveExploits0References4
Rows per page
Query Builder