CVE-2021-32796

xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes duri...

CVE-2021-32796

xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes duri...

CVE-2021-32796

xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes duri...

CVE-2021-32796: Improper Encoding or Escaping of Output

xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes duri...

Logging: A Deep Dive

Our RASP product At Imperva our team builds a product called RASP which stands for Runtime Application Self Protection. As indicated by the name, it is a security product which plugs directly into the runtime of an application in order to provide a similar and complementary set of capabilities as...

CVE-2020-10673

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CentOS: Security Advisory for xstream (CESA-2021:2683)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

xstream security update

CentOS Errata and Security Advisory CESA-2021:2683 An update for xstream is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: xstream security update

An update for xstream is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RUSTSEC-2021-0074 Incorrect handling of embedded SVG and MathML leads to mutation XSS

Affected versions of this crate did not account for namespace-related parsing differences between HTML, SVG, and MathML. Even if the svg and math elements are not allowed, the underlying HTML parser still treats them differently. Running cleanup without accounting for these differing namespaces...

PT-2021-22001

Name of the Vulnerable Software and Affected Versions: ammonia crate versions prior to 3.1.0 Description: The issue arises from mishandled parsing differences for HTML, SVG, and MathML, leading to potential XSS. The underlying HTML parser treats svg and math elements differently, even if they are...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=1.0.0-rc-1, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =1.0.0-rc-1, =1.0.0-rc-1, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29480 Source advisory: OSV:GHSA-2CC5-23R7-VC4V...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=1.0.0-rc-1, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =1.0.0-rc-1, =1.0.0-rc-1, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29480 Source advisory: GHSA-2CC5-23R7-VC4V...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=1.0.0-rc-1, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =1.0.0-rc-1, =1.0.0-rc-1, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29481 Source advisory: GHSA-PHJ8-4CQ3-794G...

CRLF vulnerability in Fiber

Impact The filename that is given in c.Attachment is not escaped, and therefore vulnerable for a CRLF injection attack. I.e. an attacker could upload a custom filename and then give the link to the victim. With this filename, the attacker can change the name of the downloaded file, redirect to...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=0.9.3, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (>=0.9.3, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =0.9.3, =0.9.3, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29481 Source advisory: MEND:CVE-2021-29481...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=0.9.3, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (>=0.9.3, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =0.9.3, =0.9.3, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29480 Source advisory: MEND:CVE-2021-29480...

GHSA-32WR-8WXM-852C Deserialization of Untrusted Data in NukeViet

includes/core/isuser.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk...

Apache OFBiz Insecure Deserialization (CVE-2021-29200)

An insecure deserialization vulnerability exists in Apache OFBiz. This vulnerability is due to Java serialization issues when processing requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request...

Deserialization of Untrusted Data in Flask-Caching

Flask-Cache adds easy cache support to Flask. The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage e.g., filesystem, Memcached, Redis, etc., they...