120 matches found
CVE-2022-1782
CVE-2022-1782 affects the GitHub repo erudika/para, with a Cross-site Scripting (XSS) vulnerability in versions prior to v1.45.11. The root cause is described as a data handling flaw in the code path (Utils.java) that fails to filter/escape user input, enabling an attacker to inject JavaScript. I...
CVE-2022-1782 Cross-site Scripting (XSS) - Generic in erudika/para
Cross-site Scripting XSS - Generic in GitHub repository erudika/para prior to v1.45.11...
CVE-2022-1782 Cross-site Scripting (XSS) - Generic in erudika/para
Cross-site Scripting XSS - Generic in GitHub repository erudika/para prior to v1.45.11...
Erudika Para 跨站脚本漏洞
Erudika Para is a command-line interface from the Bulgarian company Erudika. cross-site scripting vulnerability exists in versions prior to Erudika Para v1.45.11, which stems from a function in Utils.java that lacks filtering and escaping for user data. An attacker could use this vulnerability to...
Ubuntu: Security Advisory (USN-5418-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in fixuppagefault in the Xen hypervisor implementation. If a 64-bit para-virtualized guest accessed a certain area of memory, it could cause a denial of service on the host system running the Xen hyperviso...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as the Xen implementation did not prevent applications running in a para-virtualized guest from modifying CR4 TSC. This could cause a local denial of service...
Denial Of Service (DoS)
xen is vulnerable to denial of service DoS. The vulnerability exists as it was discovered that the hypervisor's para-virtualized framebuffer PVFB backend failed to validate the frontend's framebuffer description properly. This could allow a privileged user in the unprivileged domain DomU to cause...
Denial Of Service (DoS)
xen is vulnerable to denial of service. The hypervisor's para-virtualized framebuffer PVFB backend failed to validate the frontend's framebuffer description. This could allow a malicious user to cause a denial of service, or to use a specially crafted frontend to compromise the privileged domain...
Fuzzing para-virtualized devices in Hyper-V
Introduction Hyper-V is the backbone of Azure, running on its Hosts to provide efficient and fair sharing of resources, but also isolation. That’s why we, in the vulnerability research team for Windows, have been working in the background for years now helping secure Hyper-V. And why Microsoft...
Fuzzing para-virtualized devices in Hyper-V
Introduction Introduction Hyper-V is the backbone of Azure, running on its Hosts to provide efficient and fair sharing of resources, but also isolation. That’s why we, in the vulnerability research team for Windows, have been working in the background for years now helping secure Hyper-V. And why...
luzparaospovos.org.br XSS vulnerability
Open Bug Bounty ID: OBB-665043 Description| Value ---|--- Affected Website:| luzparaospovos.org.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
accesoriosparacaballo.mexicored.com.mx XSS vulnerability
Open Bug Bounty ID: OBB-455479 Description| Value ---|--- Affected Website:| accesoriosparacaballo.mexicored.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP...
Hangul Word Processor Type Confusion (CVE-2015-6585)
There exists a Type Confusion vulnerability in the Hangul Word Processor HWP. This is due to the way HWP handles Para change requests. A successful attack, such as in the Hidden Cobra Botnet, could lead to arbitrary code execution or stolen information...
Type confusion
hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text tag...
CVE-2017-9764
Cross-site scripting XSS vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action...
Radio Nacidos Para Triunfar - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Radio Nacidos Para Triunfar published at the 'play' market has multiple vulnerabilities...
UBUNTU-CVE-2016-10024
Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service host hang or crash by modifying the instruction stream asynchronously while performing certain kernel operations...
Xen Denial of Service Vulnerability (CNVD-2016-11700)
Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A denial-of-service vulnerability...
