Cross-site Scripting in pandao editor.md

pandao Editor.md 1.5.0 allows XSS via the Javasript: string...

GHSA-5Q54-8P9J-X74J Cross-site Scripting in pandao editor.md

pandao Editor.md 1.5.0 allows XSS via the Javasript: string...

CVE-2019-14517: Improper Neutralization of Input During Web Page Generation

pandao Editor.md 1.5.0 allows XSS via the Javascript: string...

Information Disclosure

Microsoft Chakracore is vulnerable to information disclosure. This is due to a use-after-free UAF bug when accessing a local Javascript String buffer, which allows an attacker to obtain sensitive information to perform further attacks against the system...

Mozilla Firefox 17.x <= 17 Multiple Vulnerabilities

Binary data 801345.prm...

CVE-2010-1789

Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a JavaScript string object...

Heap overflow

Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a JavaScript string object...

CVE-2010-1789

Removed by vendor...

CVE-2010-1988

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary code via JavaScript code that performs certain string concatenation and substring operations, a different vulnerability than...

CVE-2005-0989

The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...