Lucene search
K

634 matches found

Cvelist
Cvelist
added 2020/02/11 7:3 p.m.21 views

CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

8.8AI score0.00119EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2020/01/30 10:3 a.m.3 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01798EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/30 10:3 a.m.1 views

Mozilla: CSS sanitization does not escape HTML tags

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS7.3AI score0.02423EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/16 2:14 p.m.1 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01798EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/16 12:2 p.m.5 views

Mozilla: CSS sanitization does not escape HTML tags

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS7.3AI score0.02423EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/16 12:2 p.m.2 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01798EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/16 11:56 a.m.3 views

Mozilla: CSS sanitization does not escape HTML tags

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS7.3AI score0.02423EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/14 6:46 p.m.3 views

Mozilla: CSS sanitization does not escape HTML tags

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS7.3AI score0.02423EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/14 6:46 p.m.3 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01798EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/13 2:52 p.m.3 views

Mozilla: CSS sanitization does not escape HTML tags

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS7.3AI score0.02423EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/13 2:52 p.m.2 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01798EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/01/13 2:27 p.m.1 views

Mozilla: Bypass of @namespace CSS sanitization during pasting

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01798EPSS
Exploits0References5
OSV
OSV
added 2020/01/08 10:15 p.m.1 views

DEBIAN-CVE-2019-17016

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.1AI score0.01798EPSS
Exploits0References1
OSV
OSV
added 2020/01/08 10:15 p.m.2 views

DEBIAN-CVE-2019-17022

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...

6.1CVSS6.9AI score0.02423EPSS
Exploits0References1
OSV
OSV
added 2020/01/08 10:15 p.m.0 views

UBUNTU-CVE-2019-17016

When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR 68.4 and Firefox 72...

6.1CVSS7.3AI score0.01798EPSS
Exploits0References11
Imperva Blog
Imperva Blog
added 2019/12/04 12:19 p.m.51 views

Adding Some Salt to Our Network – Part 1

Why configuration management system was a must for our network, and how we chose SaltStack When we planned and designed the network automation at Imperva Cloud, we split our automation systems into three different systems, where each of the systems has a different set of requirements: 1...

Exploits0
UbuntuCve
UbuntuCve
added 2019/11/14 2:15 a.m.22 views

CVE-2011-1588

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error...

7.8CVSS7.1AI score0.0032EPSS
Exploits0References1
Prion
Prion
added 2019/11/14 2:15 a.m.19 views

Format string

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error...

6.8CVSS7AI score0.0032EPSS
Exploits0References6Affected Software3
Debian CVE
Debian CVE
added 2019/11/14 1:51 a.m.25 views

CVE-2011-1588

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error...

7.8CVSS7.5AI score0.0032EPSS
Exploits0
OPENSUSE Linux
OPENSUSE Linux
added 2019/10/08 12:0 a.m.140 views

Security update for putty (moderate)

openSUSE Security Update: Security update for putty Announcement ID: openSUSE-SU-2019:2292-1 Rating: moderate References: 1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that fixes two vulnerabilities is...

7.5CVSS7.9AI score0.00474EPSS
Exploits0References1
Rows per page
Query Builder