The vulnerability of the MediaRecorder component in the Google Chrome web browser, which allows a hacker to trigger a service failure

The vulnerability of the MediaRecorder component in the Google Chrome web browser arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

CVE-2016-9651

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2019-23270)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in affix in Bootstrap versions prior to 3.4.0, which can be exploited by remote attackers to inject arbitrary web script or HTML...

PT-2019-6341 · D Link · D-Link Dir-818Lw +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-818LW Rev.A version 2.05.B03 D-Link DIR-822 B1 version 202KRb06 Description: The issue affects the /HNAP1/SetRouterSettings message, where the RemotePort parameter is vulnerable. This vulnerability can be exploited by sending a...

XML External Entity Reference in c3p0:c3p0

c3p0 allows XXE during initialization...

XSLT CMS Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in XSLT CMS, a content management system CMS written in PHP and based on XML and XSL transformations. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the title field of the create/?action=items.edit&type=Page...

Mini-XML Denial of Service Vulnerability

Mini-XML also known as mxml is a small XML parser developed using the C language . A denial of service vulnerability exists in the 'mxmlAdd' function of the mxml-node.c file in Mini-XML version 2.12. A remote attacker can exploit this vulnerability with a specially crafted xml file to cause a...

Cross site scripting

WeBid version up to current version 1.2.2 contains a Cross Site Scripting XSS vulnerability in userlogin.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must clic...

The vulnerability of the Python programming package, related to errors in resource release, allows a perpetrator to trigger a service failure.

The vulnerability of the Python programming package is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted XML document...

The vulnerability in the web interface of the Cisco Energy Management Suite, related to incorrect restrictions on XML references to external objects (XXE), allows an attacker to disclose or modify sensitive information.

The vulnerability in the web interface of the Cisco Energy Management Suite relates to incorrect restrictions on XML references to external objects XXE. Exploiting this vulnerability could allow an attacker to disclose or modify sensitive information...

CVE-2018-6095

Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page...

UBUNTU-CVE-2018-6094

Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DRUPAL-CONTRIB-2018-074

This base theme bridges the gap between Drupal and the Bootstrap Framework. The theme doesn't sufficiently filter valid targets under the scenario of opening modals, popovers, and tooltips. This vulnerability is mitigated by the fact that an attacker must already have the ability to either: 1...

The vulnerability affects the implementation of Security Assertion Markup Language, a mechanism for authentication in software-based secure mobile access solutions from Cisco. This vulnerability allows attackers to bypass the authentication process.

The vulnerability of the Security Assertion Markup Language SAML authentication mechanism for Single Sign-On SSO in Cisco AnyConnect Secure Mobility Client, Cisco Adaptive Security Appliance ASA, and Cisco Firepower Threat Defense FTD is related to improper session management. Exploiting this...

UBUNTU-CVE-2018-6076

Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page...

CVE-2018-8564

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge...

keycloak: auth permitted with expired certs in SAML client

It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks...

The vulnerability of the Chrome web browser’s angle library, allowing a hacker to execute arbitrary code

The vulnerability of the Chrome web browser’s angle library arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, cause system failures, or disclose sensitive information through a specially...

DEBIAN-CVE-2018-19206

steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of , as demonstrated by an onload attribute in a BODY element, within an HTML attachment...

The vulnerability of the XML file analyzer in the libxml2 library allows a hacker to trigger a service failure.

The vulnerability of the XML file analyzer in the libxml2 library arises from insufficient restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted XML document...