Lucene search
+L

79 matches found

WPVulnDB
WPVulnDB
added 2023/01/19 12:0 a.m.19 views

Page Loading Effects < 3.0.0 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS4.8AI score0.00392EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2023/01/19 12:0 a.m.11 views

WordPress Page Loading Effects Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Page Loading Effects Type Plugin Vulnerable versions = 2.0.0 Fixed in 3.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23718 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 68ff95331eeb Credits yuyudhn Required...

5.9CVSS5.8AI score0.00392EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/30 4:34 p.m.11 views

CVE-2022-40313

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load...

6.6AI score0.0054EPSS
Exploits0References2
OSV
OSV
added 2022/04/09 1:15 a.m.5 views

CVE-2022-26877

Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page...

6.5CVSS5.8AI score0.01098EPSS
Exploits0References2
Citrix
Citrix
added 2021/08/23 12:0 a.m.8 views

Gateway / AAA : Page stuck at loading (Page Spinning ) after upgrade.

After upgrade when accessing the Citrix Gateway the page is stuck at spinning wheel...

7.1AI score
Exploits0
CNNVD
CNNVD
added 2021/08/05 12:0 a.m.6 views

SAMSUNG Smart Touch Call 安全漏洞

SAMSUNG Smart Touch Call is a smart call application from Samsung South Korea. lets users know immediately that a call is spam, blocks the call, and then lets users report the call. A security vulnerability exists in SAMSUNG Smart Touch Call prior to version 1.0.0.5, which stems from an improper...

5.3CVSS5.9AI score0.00814EPSS
Exploits0References2
CNVD
CNVD
added 2020/08/05 12:0 a.m.3 views

Unspecified Vulnerability in WebKit Page Loading Component of Multiple Apple Products

Apple Safari is a web browser that is the default browser that comes with Mac OS X and iOS. apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. webKit Page Loading is one of the page loading components. A security vulnerability exists in the...

5.3CVSS6.2AI score0.01377EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/26 12:0 a.m.4 views

Multiple Apple Products WebKit Page Loading Component Logic Issue Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. webKit Page Loading is one of the WebKit Page Loading components. loading component. A security vulnerability exists in the WebKit...

4.3CVSS8.9AI score0.01665EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.4 views

Apple iOS and Apple Safari WebKit Page Loading Component Cross-Site Scripting Vulnerability

Apple Safari and Apple iOS are both products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with Mac OS X and iOS. Apple iOS is a suite of operating systems developed for mobile devices. WebKit Page Loading is a page loading component. A cross-site scripting...

6.1CVSS5.6AI score0.01014EPSS
Exploits0References1
OSV
OSV
added 2019/02/28 6:29 p.m.4 views

CVE-2018-18495

WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions...

6.5CVSS7.3AI score0.01665EPSS
Exploits0References4
CNVD
CNVD
added 2018/08/01 12:0 a.m.7 views

Apple Safari and iOS WebKit Page Loading Address Bar Spoofing Vulnerability

Apple Safari and iOS are both products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; iOS is a set of operating systems developed for mobile devices. WebKit is an open source web browser engine developed by the KDE...

6.5CVSS6.7AI score0.00785EPSS
Exploits0References1
Exploit DB
Exploit DB
added 2017/09/19 12:0 a.m.42 views

Microsoft Edge 38.14393.1066.0 - Memory Corruption with Partial Page Loading

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1309 There is a security issue in Microsoft Edge related to how HTML documents are loaded. If Edge displays a HTML document from a slow HTTP server, it is possible that a part of the document is going to be rendered before the serv...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/07/27 12:0 a.m.33 views

Fedora 24 : webkitgtk4 (2017-37f68e3534)

This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix JavaScriptCore...

8.8CVSS7.7AI score0.01827EPSS
Exploits0References2
CNVD
CNVD
added 2017/07/21 12:0 a.m.6 views

Multiple Apple Products WebKit Page Loading Memory Corruption Vulnerability

Apple Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; tvOS is a smart TV operating system; iOS is an operating system developed for mobile devices.WebKit Page Loading component is one of the WebKit page loading components. A memory corruptio...

8.8CVSS7.6AI score0.01603EPSS
Exploits0References1
Prion
Prion
added 2017/07/20 4:29 p.m.20 views

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page Loading" component. It...

6.8CVSS8.9AI score0.01603EPSS
Exploits0References8Affected Software5
OSV
OSV
added 2017/07/20 4:29 p.m.6 views

DEBIAN-CVE-2017-7019

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page Loading" component. It...

8.8CVSS8.9AI score0.01603EPSS
Exploits0References1
OSV
OSV
added 2017/07/20 4:29 p.m.2 views

UBUNTU-CVE-2017-7019

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page Loading" component. It...

8.8CVSS7.7AI score0.01603EPSS
Exploits0References9
OSV
OSV
added 2017/07/20 4:29 p.m.10 views

CVE-2017-7019

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page Loading" component. It...

8.8CVSS8.9AI score
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2017/02/01 12:0 a.m.29 views

Safari < 10.0.3 Multiple Vulnerabilities

Binary data 9931.prm...

8.8CVSS8AI score0.07043EPSS
Exploits19References15
Tenable Nessus
Tenable Nessus
added 2017/01/30 12:0 a.m.28 views

Apple iOS < 10.2.1 Multiple Vulnerabilities

Binary data 9929.prm...

9.3CVSS7.1AI score0.11274EPSS
Exploits24References21
Rows per page
Query Builder