Lucene search
+L

248 matches found

Redos
Redos
•added 2021/12/24 12:00 a.m.•17 views

ROS-2-1872

2.1872 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2021/12/24 12:00 a.m.•9 views

ROS-2-2186

2.2186 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.7AI score0.03612EPSS
SaveExploits1
Prion
Prion
•added 2021/12/13 6:15 p.m.•46 views

Hardcoded credentials

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

6.8CVSS6.7AI score0.02477EPSS
SaveExploits0References14Affected Software8
AlpineLinux
AlpineLinux
•added 2021/12/13 6:05 p.m.•93 views

CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant...

8.2CVSS7.8AI score0.02477EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/11/17 9:58 p.m.•129 views

HTML comments vulnerability allowing to execute JavaScript code

Affected packages The vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. Impact A potential vulnerability has been discovered in CKEditor 4 HTML processing core module. The vulnerability allowed to inject malformed comments HTML...

8.2CVSS2.7AI score0.01573EPSS
SaveExploits0References8Affected Software2
NVD
NVD
•added 2021/11/17 8:15 p.m.•23 views

CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

8.2CVSS0.01573EPSS
SaveExploits0References6
OSV
OSV
•added 2021/11/17 8:15 p.m.•27 views

CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

5.4CVSS5.2AI score
SaveExploits0References6
OSV
OSV
•added 2021/11/17 8:15 p.m.•3 views

DEBIAN-CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

5.4CVSS6.9AI score0.01573EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2021/11/17 8:15 p.m.•41 views

CVE-2021-41165

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

8.2CVSS6.7AI score0.01573EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/11/17 12:00 a.m.•9 views

PT-2021-6670 · Unknown +1 · Ckeditor 4 +1

Name of the Vulnerable Software and Affected Versions: CKEditor 4 versions prior to 4.17.0 Description: A vulnerability has been discovered in the core HTML processing module of CKEditor 4, which may affect all plugins used by the editor. This issue allows an attacker to inject malformed comments...

8.2CVSS6.2AI score0.01573EPSS
SaveExploits0References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•1 views

CVE-2021-41165: Improper Neutralization of Input During Web Page Generation

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result...

8.2CVSS7.3AI score0.01573EPSS
SaveExploits0References3
RubySec
RubySec
•added 2021/11/17 12:00 a.m.•16 views

HTML comments vulnerability allowing to execute JavaScript code

Affected packages The vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. Impact A potential vulnerability has been discovered in CKEditor 4 HTML processing core module. The vulnerability allowed to inject malformed comments HTML...

8.2CVSS6.9AI score0.01573EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/11/10 12:00 a.m.•15 views

The vulnerability of the scene handler in Windows operating systems allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of scene handlers in Windows operating systems is related to writing beyond buffer boundaries in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service to fail through a specially created web page...

9.3CVSS8AI score0.40062EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/09/20 12:00 a.m.•10 views

多款 Apple 产品缓冲区错误漏洞

Apple Safari and others are products of Apple Inc.Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs. A buffer error...

7.8CVSS7.7AI score0.01355EPSS
SaveExploits0References38
Redos
Redos
•added 2021/09/08 12:00 a.m.•13 views

ROS-2-1476

2.1476 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.5AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2021/09/08 12:00 a.m.•13 views

ROS-2-1657

2.1657 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.5AI score0.03612EPSS
SaveExploits1
Redos
Redos
•added 2021/09/08 12:00 a.m.•11 views

ROS-2-2135

2.2135 Mozilla Firefox browser vulnerability CVE-2021-29970, CVE-2021-29976 1. Vulnerability description: CVE-2021-29970 A vulnerability in the Mozilla Firefox browser, is related to a release error in accessibility functions when processing HTML content. Exploitation of the vulnerability could...

8.8CVSS8AI score0.01428EPSS
SaveExploits2
Redos
Redos
•added 2021/09/08 12:00 a.m.•10 views

ROS-2-2210

2.2210 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS7.6AI score0.03612EPSS
SaveExploits2
Redos
Redos
•added 2021/09/08 12:00 a.m.•20 views

ROS-2-1344

2.1344 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.6AI score0.03612EPSS
SaveExploits2
Redos
Redos
•added 2021/09/08 12:00 a.m.•13 views

ROS-2-1815

2.1815 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS7.6AI score0.03612EPSS
SaveExploits2
Rows per page
Query Builder