6 matches found
June 28, 2022—KB5014666 (OS Builds 19042.1806, 19043.1806, and 19044.1806) Preview
June 28, 2022—KB5014666 OS Builds 19042.1806, 19043.1806, and 19044.1806 Preview Applies To Windows Server, version 20H2, all editions Windows 10, version 21H1, all editions Windows 10, version 21H2, all editions Windows 10 Enterprise Multi-Session, version 20H2 Windows 10 Enterprise and Educatio...
April 25, 2017—KB4016240 (OS Build 15063.250)
April 25, 2017—KB4016240 OS Build 15063.250 Applies To Windows 10, version 1703, all editions Improvements and fixes This non-security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where VMs might...
CVE-2010-2472
Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting XSS attack. This vulnerability is mitigat...
July 16, 2018—KB4345420 (OS Build 16299.551)
July 16, 2018—KB4345420 OS Build 16299.551 Applies To Windows 10, version 1709, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addresses an issue that may cause some devices...
CVE-2016-2162: Improper Neutralization of Input During Web Page Generation
Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors involving language display...
PT-2016-1649
Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.x through 2.3.25 Description The issue arises from the lack of text sanitization in the Locale object constructed by I18NInterceptor, potentially allowing remote attackers to conduct cross-site scripting XSS attacks vi...