Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2006-0479

Malware in sbrugna...

4.3CVSS6.4AI score0.01247EPSS
Exploits1References10
Hacker One
Hacker One
added 2022/11/01 11:12 p.m.23 views

Khan Academy: xss due to incorrect handling of postmessages

Due to Insecure handling of create link tags a tags in a function called autolink found in 7Bmt.af733e428f9f986dfc96.js js e = n.autolinke, !0; const n = function const e = /\b?:?:https?://|www\d0,3.|a-z0-9.-+.a-z2,4/?:^\s&+|&|?:^\s|?:^\s+\+?:?:^\s|?:^\s+\|^\s!\;:'".,?«»“”‘’&/gi; return...

7.1AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/06/29 1:15 a.m.2 views

CVE-2022-28803

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest XHR...

5.4CVSS6.1AI score0.00188EPSS
Exploits0References3
Friends Of PHP
Friends Of PHP
added 2022/06/27 5:27 a.m.18 views

CVE-2022-28803: Stored XSS in link tags added via XHR

More info at https://www.silverstripe.org/download/security-releases/cve-2022-28803...

5.4CVSS7.2AI score0.00188EPSS
Exploits0Affected Software1
OSV
OSV
added 2020/05/13 11:15 p.m.11 views

CVE-2020-11065

In TYPO3 CMS greater than or equal to 9.5.12 and less than 9.5.17, and greater than or equal to 10.2.0 and less than 10.4.2, it has been discovered that link tags generated by typolink functionality are vulnerable to cross-site scripting; properties being assigned as HTML attributes have not been...

5.4CVSS5.3AI score
Exploits0References1
Cvelist
Cvelist
added 2020/05/13 11:5 p.m.17 views

CVE-2020-11065 Cross-Site Scripting in TYPO3 CMS

In TYPO3 CMS greater than or equal to 9.5.12 and less than 9.5.17, and greater than or equal to 10.2.0 and less than 10.4.2, it has been discovered that link tags generated by typolink functionality are vulnerable to cross-site scripting; properties being assigned as HTML attributes have not been...

5.4CVSS5.6AI score0.00206EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2015/04/14 1:0 p.m.1 views

kernel: isofs: unbound recursion when processing relocated directories

It was found that the parserockridgeinodeinternal function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link CL tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the...

4CVSS6.7AI score0.00076EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2015/04/07 3:8 p.m.1 views

kernel: isofs: unbound recursion when processing relocated directories

It was found that the parserockridgeinodeinternal function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link CL tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the...

4CVSS6.7AI score0.00117EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2015/01/28 7:2 p.m.4 views

kernel: isofs: unbound recursion when processing relocated directories

It was found that the parserockridgeinodeinternal function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link CL tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the...

4CVSS6.7AI score0.00117EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2015/01/28 7:2 p.m.2 views

kernel: isofs: unbound recursion when processing relocated directories

It was found that the parserockridgeinodeinternal function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link CL tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the...

4CVSS6.7AI score0.00076EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2014/12/16 7:12 p.m.2 views

kernel: isofs: unbound recursion when processing relocated directories

It was found that the parserockridgeinodeinternal function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link CL tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the...

4CVSS6.6AI score0.00076EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2014/09/29 7:41 p.m.3 views

kernel: isofs: unbound recursion when processing relocated directories

It was found that the parserockridgeinodeinternal function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link CL tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the...

4CVSS6.6AI score0.00076EPSS
Exploits1References4
Prion
Prion
added 2006/01/31 11:3 a.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified in June 2005, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...

4.3CVSS6.3AI score0.01247EPSS
Exploits1References9Affected Software1
Prion
Prion
added 2006/01/31 11:3 a.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...

4.3CVSS6.3AI score0.1109EPSS
Exploits1References10Affected Software1
NVD
NVD
added 2006/01/31 11:3 a.m.6 views

CVE-2006-0471

Cross-site scripting XSS vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified in June 2005, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...

4.3CVSS5.8AI score0.01247EPSS
Exploits1References9
NVD
NVD
added 2006/01/31 11:3 a.m.10 views

CVE-2006-0472

Cross-site scripting XSS vulnerability in guestbook.php in my little homepage my little guestbook, as last modified in March 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...

4.3CVSS5.8AI score0.01247EPSS
Exploits1References9
CVE
CVE
added 2006/01/31 11:0 a.m.41 views

CVE-2006-0472

The CVE-2006-0472 entry describes a Cross-site scripting (XSS) vulnerability in guestbook.php of "my little homepage my little guestbook" (last modified March 2004). The issue permits remote attackers to inject arbitrary JavaScript via a javascript: URI embedded in BBcode link tags. Connected rec...

4.3CVSS5.9AI score0.01247EPSS
Exploits1References9Affected Software1
Cvelist
Cvelist
added 2006/01/31 11:0 a.m.9 views

CVE-2006-0471

Cross-site scripting XSS vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified in June 2005, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...

5.8AI score0.01247EPSS
Exploits1References9
Rows per page
Query Builder