Lucene search
K

7 matches found

Veracode
Veracode
added 2020/02/25 5:39 a.m.23 views

Cross-Site Scripting (XSS)

bleach is vulnerable to cross-site scripting XSS. Invocation of bleach.clean method with a scripting parameter set to FALSE and a raw tags such as title, textarea, script, style, noembed, noframes, iframe, xmp allows BleachHTMLParser to process user-contributed content using innerHTML property,...

6.1CVSS1AI score0.01688EPSS
Exploits1References13Affected Software2
NVD
NVD
added 2017/12/21 7:29 p.m.16 views

CVE-2017-17692

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property...

7.5CVSS7.5AI score0.78843EPSS
Exploits7References4
Cvelist
Cvelist
added 2017/12/21 7:0 p.m.19 views

CVE-2017-17692

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property...

7.5AI score0.78843EPSS
Exploits7References4
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.27 views

Microsoft Internet Explorer textNode Use-After-Free

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

7.1AI score
Exploits0
CVE
CVE
added 2010/05/27 6:32 p.m.125 views

CVE-2010-2084

CVE-2010-2084 affects Microsoft ASP.NET 2.0. The vulnerability arises because InnerHtml can be set on controls inheriting from HtmlContainerControl, enabling remote XSS via attribute-related vectors. Documented impacts are limited to XSS; no exploit or patch/version details are provided in the su...

4.3CVSS5.7AI score0.12542EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2010/04/01 10:30 p.m.27 views

CVE-2010-1226

The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service Safari, Mail, or Springboard crash via a crafted innerHTML property of a DIV element, related to a "malformed character" issue...

5CVSS6.3AI score0.04995EPSS
Exploits1References2
Cvelist
Cvelist
added 2010/04/01 10:0 p.m.29 views

CVE-2010-1226

The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service Safari, Mail, or Springboard crash via a crafted innerHTML property of a DIV element, related to a "malformed character" issue...

6.3AI score0.04995EPSS
Exploits1References2
Rows per page
Query Builder