34 matches found
Cross site scripting
invenio-previewer before 1.0.0a12 allows XSS...
PYSEC-2019-26
invenio-previewer before 1.0.0a12 allows XSS...
PYSEC-2019-96
invenio-previewer before 1.0.0a12 allows XSS...
PYSEC-2019-26
invenio-previewer before 1.0.0a12 allows XSS...
CVE-2019-1020019
CVE-2019-1020019 affects the Invenio-Previewer component. The connected documents confirm a cross-site scripting (XSS) vulnerability in invenio-previewer versions prior to 1.0.0a12, caused by insufficient validation of client-side data by the WEB application. Exploitation would enable injection o...
CVE-2019-1020019
invenio-previewer before 1.0.0a12 allows XSS...
Cross-site Scripting in invenio-previewer
Cross-Site Scripting XSS vulnerability in JSON, Markdown and iPython Notebook previewers Impact Several Cross-Site Scripting XSS vulnerabilities have been found in the JSON, Markdown and iPython Notebook previewers. The vulnerabilities would allow a malicous user to upload a JSON, Markdown or...
GHSA-J9M2-6HQ2-4R3C Cross-site Scripting in invenio-previewer
Cross-Site Scripting XSS vulnerability in JSON, Markdown and iPython Notebook previewers Impact Several Cross-Site Scripting XSS vulnerabilities have been found in the JSON, Markdown and iPython Notebook previewers. The vulnerabilities would allow a malicous user to upload a JSON, Markdown or...
USN-4024-1 evince update
As a security improvement, this update adjusts the AppArmor profile for the Evince thumbnailer to reduce access to the system and adjusts the AppArmor profile for Evince and Evince previewer to limit access to the DBus system bus. Additionally adjust the evince abstraction to disallow writes on...
September 26, 2018—KB4457136 (OS Build 16299.699)
None None...
Kopano WebApp Cross-Site Scripting Vulnerability
Kopano WebApp is a Web-based e-mail management program from the German Kopano team. file previewer plugin is one of the document previewer plugin. A cross-site scripting vulnerability exists in the js/ViewerPanel.js file of the file previewer plugin in Kopano WebApp 3.3.0 and earlier versions. A...
CVE-2017-11666
Cross-site scripting XSS vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a specially crafted previewable file...
Cross site scripting
Cross-site scripting XSS vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a specially crafted previewable file...
CVE-2017-11666
Cross-site scripting XSS vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a specially crafted previewable file...