Lucene search
+L

7 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/11/17 7:7 a.m.9 views

Security Bulletin: The OWASP Java HTML Sanitizer Vulnerability Affects IBM Jazz Reporting Service.

Summary A vulnerability in the OWASP Java HTML Sanitizer, present in versions prior to 20211018.1, may result in incomplete enforcement of sanitization policies for specific HTML elements. This issue affects IBM® Jazz Reporting Service and has been addressed as documented in the Remediation secti...

9.8CVSS6.5AI score0.02844EPSS
SaveExploits1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2022-4744

Malicious code in bioql PyPI...

2.6CVSS6.5AI score0.01366EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/05/22 9:47 a.m.8 views

CVE-2011-4457

OWASP HTML Sanitizer aka owasp-java-html-sanitizer before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element...

2.6CVSS6.2AI score0.01366EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/17 5:36 a.m.26 views

GHSA-PCM9-FP55-563V OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled

OWASP HTML Sanitizer aka owasp-java-html-sanitizer before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element...

2.6CVSS5.7AI score0.01366EPSS
SaveExploits1References7
NVD
NVD
added 2011/11/17 11:55 p.m.17 views

CVE-2011-4457

OWASP HTML Sanitizer aka owasp-java-html-sanitizer before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element...

2.6CVSS5.9AI score0.01366EPSS
SaveExploits1References2
Prion
Prion
added 2011/11/17 11:55 p.m.15 views

Design/Logic Flaw

OWASP HTML Sanitizer aka owasp-java-html-sanitizer before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element...

2.6CVSS6.5AI score0.01366EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2011/11/17 11:0 p.m.23 views

CVE-2011-4457

OWASP HTML Sanitizer aka owasp-java-html-sanitizer before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element...

5.9AI score0.01366EPSS
SaveExploits1References2
Rows per page
Query Builder