The vulnerability of the web interface of the Cisco Secure Access Control System allows a perpetrator to access confidential information.

The vulnerability of the Cisco Secure Access Control System’s web interface is related to incorrect processing of external XML entities when working with XML files. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of the XML Publisher component in the PeopleSoft Enterprise PeopleTools business application suite allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the XML Publisher component in the PeopleSoft Enterprise PeopleTools business application suite is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP protocol...

The vulnerability of the S3 protocol in the S3 Browser allows a hacker to view files and obtain NTLMv2 user hash values.

The vulnerability of the S3 Browser protocol based on HTTP is related to shortcomings in the restrictions on XML links to external objects. In this case, server responses are transmitted in XML format. Exploiting this vulnerability allows a malicious actor to remotely access files and obtain user...

The vulnerability of the Cisco Secure ACS access control system’s web interface allows a perpetrator to gain access to confidential information.

The vulnerability in the Cisco Secure ACS access control system’s web interface is related to improper processing of external XML entities when working with XML files. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of the IIoT Monitor monitoring platform lies in its improper control of external XML links, allowing attackers to inject incorrect documents into the output data.

The vulnerability of the IIoT Monitor platform is related to improper control of external XML links. Exploiting this vulnerability could allow a malicious actor to inject incorrect documents into the output data...

Cross-site Scripting (XSS)

jenkins is vulnerable to cross-site scripting XSS attacks. The vulnerability exists in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration...

The vulnerability of the MediaRecorder component in the Google Chrome web browser, which allows a hacker to trigger a service failure

The vulnerability of the MediaRecorder component in the Google Chrome web browser arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

CVE-2016-9651

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2019-23270)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in affix in Bootstrap versions prior to 3.4.0, which can be exploited by remote attackers to inject arbitrary web script or HTML...

PT-2019-6341 · D Link · D-Link Dir-818Lw +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-818LW Rev.A version 2.05.B03 D-Link DIR-822 B1 version 202KRb06 Description: The issue affects the /HNAP1/SetRouterSettings message, where the RemotePort parameter is vulnerable. This vulnerability can be exploited by sending a...

XML External Entity Reference in c3p0:c3p0

c3p0 allows XXE during initialization...

XSLT CMS Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in XSLT CMS, a content management system CMS written in PHP and based on XML and XSL transformations. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the title field of the create/?action=items.edit&type=Page...

Mini-XML Denial of Service Vulnerability

Mini-XML also known as mxml is a small XML parser developed using the C language . A denial of service vulnerability exists in the 'mxmlAdd' function of the mxml-node.c file in Mini-XML version 2.12. A remote attacker can exploit this vulnerability with a specially crafted xml file to cause a...

Cross site scripting

WeBid version up to current version 1.2.2 contains a Cross Site Scripting XSS vulnerability in userlogin.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must clic...

The vulnerability of the Python programming package, related to errors in resource release, allows a perpetrator to trigger a service failure.

The vulnerability of the Python programming package is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted XML document...

The vulnerability in the web interface of the Cisco Energy Management Suite, related to incorrect restrictions on XML references to external objects (XXE), allows an attacker to disclose or modify sensitive information.

The vulnerability in the web interface of the Cisco Energy Management Suite relates to incorrect restrictions on XML references to external objects XXE. Exploiting this vulnerability could allow an attacker to disclose or modify sensitive information...

CVE-2018-6095

Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page...

UBUNTU-CVE-2018-6094

Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DRUPAL-CONTRIB-2018-074

This base theme bridges the gap between Drupal and the Bootstrap Framework. The theme doesn't sufficiently filter valid targets under the scenario of opening modals, popovers, and tooltips. This vulnerability is mitigated by the fact that an attacker must already have the ability to either: 1...

The vulnerability affects the implementation of Security Assertion Markup Language, a mechanism for authentication in software-based secure mobile access solutions from Cisco. This vulnerability allows attackers to bypass the authentication process.

The vulnerability of the Security Assertion Markup Language SAML authentication mechanism for Single Sign-On SSO in Cisco AnyConnect Secure Mobility Client, Cisco Adaptive Security Appliance ASA, and Cisco Firepower Threat Defense FTD is related to improper session management. Exploiting this...