EUVD-2018-6828

Malware in sbrugna...

Cross site scripting

A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting...

CVE-2018-25063

The CVE-2018-25063 issue affects Zenoss Dashboard up to version 1.3.4, caused by an XSS vulnerability in ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js where manipulating the HTMLString argument enables cross-site scripting. The vulnerability can be triggered remotely. Remediat...

Design/Logic Flaw

An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines malloc versus operator delete...

CVE-2018-14946

An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines malloc versus operator delete...

CVE-2018-14946

CVE-2018-14946 affects PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc uses mismatched memory management routines (malloc vs operator delete), which can lead to undefined behavior or crashes. Exploitation details and fixes are not provided in the supplied documents.