Lucene search
+L

29 matches found

Snyk
Snyk
added 2025/10/08 8:33 p.m.9 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rendering of user-supplied metadata fields such as title, description, subject, and others. An attacker can execute arbitrary HTML or JavaScript in the context of a user's browser by injecting malicious...

5.4CVSS5.7AI score0.00212EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/10/08 8:33 p.m.8 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rendering of user-supplied metadata fields such as title, description, subject, and others. An attacker can execute arbitrary HTML or JavaScript in the context of a user's browser by injecting malicious...

5.4CVSS6AI score0.00212EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.19 views

EUVD-2018-4278

Malware in sbrugna...

6.1CVSS6.3AI score0.00826EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2024-26043

Malicious code in bioql PyPI...

8.5CVSS6.6AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
added 2019/05/13 1:29 p.m.22 views

Cross site scripting

Cross-site scripting in Application Manager in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via multiple application metadata fields: Short Description, Publisher Name, Publisher Contact, or Website URL...

4.3CVSS6.2AI score0.00826EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2019/05/13 1:29 p.m.7 views

CVE-2018-12304

Cross-site scripting in Application Manager in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via multiple application metadata fields: Short Description, Publisher Name, Publisher Contact, or Website URL...

6.1CVSS5.8AI score0.00826EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/05/13 12:40 p.m.47 views

CVE-2018-12304

Cross-site scripting in Application Manager in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via multiple application metadata fields: Short Description, Publisher Name, Publisher Contact, or Website URL...

6.3AI score0.00826EPSS
SaveExploits1References1
GoogleProjectZero
GoogleProjectZero
added 2018/10/18 12:00 a.m.79 views

Deja-XNU

Posted by Ian Beer, Google Project Zero This blog post revisits an old bug found by Pangu Team and combines it with a new, albeit very similar issue I recently found to try to build a "perfect" exploit for iOS 7.1.2. State of the art An idea I've wanted to play with for a while is to revisit old...

9.3CVSS6.8AI score0.03424EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2007/10/22 3:46 p.m.10 views

libflac: Multiple security issues fixed in 1.2.1

Multiple buffer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large 1 Metadata Block Size, 2 VORBIS Comment String Size, 3 Picture Metadata MIME-TYPE Size, 4 Picture Description Size, 5 Picture Data Length, 6...

9.3CVSS6.6AI score0.06742EPSS
SaveExploits0References4
Rows per page
Query Builder