CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1831 matches found

osv_ubuntu•added 2014/03/24 2:20 p.m.•14 views

UBUNTU-CVE-2013-7343

Cross-site scripting XSS vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers to inject arbitrary web script or HTML by using URL encoding within the callback parameter name. NOTE: this vulnerability exists because of an incomplete fix fo...

4.3CVSS5.9AI score0.01481EPSS

SaveExploits1References4

osv_ubuntu•added 2014/03/24 2:20 p.m.•29 views

UBUNTU-CVE-2013-7342

Cross-site scripting XSS vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.1 allows remote attackers to inject arbitrary web script or HTML via the callback parameter, a related issue to CVE-2013-7341...

4.3CVSS5.9AI score0.01474EPSS

SaveExploits1References4

Prion•added 2014/03/24 2:20 p.m.•29 views

Cross site scripting

4.3CVSS6AI score0.02405EPSS

SaveExploits1References2Affected Software1

Prion•added 2014/03/24 2:20 p.m.•34 views

Cross site scripting

4.3CVSS6AI score0.01481EPSS

SaveExploits2References2Affected Software1

UbuntuCve•added 2014/03/24 2:20 p.m.•38 views

CVE-2013-7343

4.3CVSS6AI score0.01481EPSS

SaveExploits1References3

UbuntuCve•added 2014/03/24 2:20 p.m.•43 views

CVE-2013-7342

4.3CVSS6AI score0.01474EPSS

SaveExploits1References3

Mend•added 2014/03/22 1:00 a.m.•10 views

CVE-2013-7342

6.3CVSS0.01474EPSS

SaveExploits1References3

Mend•added 2014/03/22 1:00 a.m.•8 views

CVE-2013-7343

6.3CVSS0.01481EPSS

SaveExploits1References3

Cvelist•added 2014/03/22 1:00 a.m.•51 views

CVE-2013-7342

5.6AI score0.01474EPSS

SaveExploits1References2

CVE•added 2014/03/22 1:00 a.m.•76 views

CVE-2013-7343

CVE-2013-7343 describes a cross-site scripting (XSS) vulnerability in Flowplayer’s Flash fallback component, specifically in the flowplayer.swf used by Flowplayer HTML5 5.4.3. The issue allows remote attackers to inject arbitrary web script or HTML by abusing URL encoding within the name of the c...

4.3CVSS5.7AI score0.01481EPSS

SaveExploits1References2Affected Software1

CVE•added 2014/03/22 1:00 a.m.•72 views

CVE-2013-7342

CVE-2013-7342 describes an XSS vulnerability in Flowplayer’s Flash fallback (flowplayer.swf) used by Flowplayer HTML5 5.4.1, exploitable via the callback parameter. Several Nessus entries classify this as an unpatched issue for affected Linux distros, noting no vendor patch is available. Related ...

4.3CVSS5.7AI score0.01474EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2014/03/22 1:00 a.m.•49 views

CVE-2013-7343

5.5AI score0.01481EPSS

SaveExploits1References2

Positive Technologies•added 2014/03/22 12:00 a.m.•8 views

PT-2014-3379

Name of the Vulnerable Software and Affected Versions Flowplayer HTML5 version 5.4.3 Description The issue is related to a cross-site scripting XSS vulnerability in the Flash fallback feature. This vulnerability allows remote attackers to inject arbitrary web script or HTML by using URL encoding...

4.3CVSS0.01481EPSS

SaveExploits1References6

Positive Technologies•added 2014/03/22 12:00 a.m.•9 views

PT-2014-3378

Name of the Vulnerable Software and Affected Versions Flowplayer HTML5 version 5.4.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the callback parameter in the Flash fallback feature. This is related to a previous issue...

4.3CVSS0.01474EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2014/03/22 12:00 a.m.•8 views

CVE-2013-7343: Improper Neutralization of Input During Web Page Generation

4.3CVSS6AI score0.01481EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2014/03/22 12:00 a.m.•10 views

CVE-2013-7342: Improper Neutralization of Input During Web Page Generation

4.3CVSS6AI score0.01474EPSS

SaveExploits1References2

ThreatPost•added 2014/01/22 9:15 a.m.•15 views

XSS Filter Bypass Bug Found in Chrome and Safari

There is a bug in the anti-cross site scripting filter in Chrome and Safari that enables an attacker to bypass the filter in some cases and use an XSS flaw on a given site to compromise visitors’s machines. The vulnerability is fairly simple to exploit and a researcher has posted proof-of-concept...

5.8AI score

SaveExploits0References3

seebug.org•added 2013/12/17 12:00 a.m.•37 views

FlashCanvas 'proxy.php'跨站脚本漏洞

Bugtraq ID:64251 CVE ID:CVE-2013-6880 FlashCanvas是一个JavaScript库，可使Internet Explorer支持HTML5 Canvas。 FlashCanvas 'proxy.php'脚本不充分校验Referer Header数据，允许远程攻击者利用漏洞提交特制的GET请求，可获取敏感信息或劫持用户会话。 0 FlashCanvas 1.5 厂商补丁： FlashCanvas ----- FlashCanvas 1.6已经修复该漏洞，请到厂商的主页下载： http://flashcanvas.net/...

6.5AI score0.0138EPSS

SaveExploits2

Mozilla•added 2013/12/10 12:00 a.m.•56 views

Character encoding cross-origin XSS attack — Mozilla

Security researcher Masato Kinugawa discovered that if a web page is missing character set encoding information it can inherit character encodings across navigations into another domain from an earlier site. Only same-origin inheritance is allowed according to the HTML5 specification. This issue...

4.3CVSS2.3AI score0.03402EPSS

SaveExploits1References2Affected Software2

Kitploit•added 2013/12/05 2:15 a.m.•47 views

[Wapiti 2.3.0] Web Application Vulnerability Scanner

Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti act...

7.9AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by