Lucene search
K

6 matches found

Fedora
Fedora
added 2024/03/07 10:33 p.m.15 views

[SECURITY] Fedora 40 Update: nekohtml-1.9.22-26.fc40

NekoHTML is a simple HTML scanner and tag balancer that enables application programmers to parse HTML documents and access the information using standard XML interfaces. The parser can scan HTML files and "fix up" many common mistakes that human and computer authors make in writing HTML documents...

8.8CVSS6.4AI score0.45835EPSS
Exploits3
SUSE CVE
SUSE CVE
added 2023/02/15 6:1 a.m.1 views

SUSE CVE-2009-4214

Cross-site scripting XSS vulnerability in the striptags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to inject arbitrary web script or HTML via vectors involving non-printing ASCII characters, related to HTML::Tokenizer and...

4.3CVSS6AI score0.01632EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.39 views

actionpack Cross-site Scripting vulnerability

The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...

4.3CVSS3.3AI score0.00625EPSS
Exploits0References12Affected Software1
RubySec
RubySec
added 2017/10/24 12:0 a.m.14 views

Moderate severity XSS vulnerability that affects rails

Cross-site scripting XSS vulnerability in the striptags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to inject arbitrary web script or HTML via vectors involving non-printing ASCII characters,related to HTML::Tokenizer and...

4.3CVSS5.9AI score0.01632EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2009/12/07 5:30 p.m.1 views

DEBIAN-CVE-2009-4214

Cross-site scripting XSS vulnerability in the striptags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to inject arbitrary web script or HTML via vectors involving non-printing ASCII characters, related to HTML::Tokenizer and...

4.3CVSS4.3AI score0.01632EPSS
Exploits0References1
CVE
CVE
added 2009/12/07 5:0 p.m.101 views

CVE-2009-4214

CVE-2009-4214 is an XSS vulnerability in Ruby on Rails via the strip_tags path. It affects Rails before 2.2.s and 2.3.x before 2.3.5, allowing remote attackers to inject arbitrary script/HTML using vectors involving non‑printing ASCII characters (related to HTML::Tokenizer and html/node.rb). Expl...

4.3CVSS7.8AI score0.01632EPSS
Exploits0References15Affected Software1
Rows per page
Query Builder