Lucene search
+L

3 matches found

BDU FSTEC
BDU FSTEC
added 2020/10/01 12:0 a.m.11 views

The vulnerability of the Knockout.js library, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Knockout.js library is related to the lack of protective measures for website structures. Exploiting this vulnerability can allow a remote attacker to perform cross-site scripting attacks...

6.1CVSS6.5AI score0.0206EPSS
SaveExploits1References5Affected Software3
OSV
OSV
added 2020/01/02 3:15 p.m.10 views

UBUNTU-CVE-2019-14862

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

6.1CVSS6.8AI score0.0206EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2019/12/03 3:13 p.m.12 views

knockout: Cross-site Scripting (XSS) attacks due to not escaping the name attribute.

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...

6.1CVSS6.8AI score0.0206EPSS
SaveExploits1References5
Rows per page
Query Builder