CVE-2019-12184

CVE-2019-12184 affects BoostIO Boostnote 0.11.15. The vulnerability is an XSS in browser/components/MarkdownPreview.js triggered via a label named flowchart, sequence, gallery, or chart, demonstrated by a crafted SRC attribute of an IFRAME element. The connected Red Hat CVE-2019-12184 entry mirro...

PT-2019-12685

Name of the Vulnerable Software and Affected Versions Boostnote version 0.11.15 Description The issue is related to a XSS in the browser/components/MarkdownPreview.js component. It can be triggered via a label named flowchart, sequence, gallery, or chart. A crafted SRC attribute of an IFRAME...

WS-2019-0564

harfbuzz in versions 2.1.1 to 2.4.0 is vulnerable to Use-of-uninitialized-value in OT::AxisValue::sanitizeo, related to src/hb-ot-stat-table.hh...

CVE-2019-12184: Improper Neutralization of Input During Web Page Generation

There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136...

Cross site scripting

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

CVE-2019-12136

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

CVE-2019-12136

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

CVE-2019-12136

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

CVE-2019-12136

BoostIO Boostnote 0.11.15 is affected by CVE-2019-12136. The vulnerability is an XSS in the UI when processing a label named mermaid, exploitable via a crafted SRC attribute of an IFRAME element. The issue originates from Boostnote’s rendering path for this label, enabling injection of malicious ...

CVE-2019-12136

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

PT-2019-12651

Name of the Vulnerable Software and Affected Versions BoostIO Boostnote version 0.11.15 Description The issue concerns a cross-site scripting XSS problem. It can be triggered via a label named mermaid by crafting the SRC attribute of an IFRAME element. Recommendations For BoostIO Boostnote versio...

CVE-2019-12136: Improper Neutralization of Input During Web Page Generation

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

WS-2019-0529

Leptonica in versions 1.54 to 1.78.0 is vulnerable to heap-buffer-overflow in tiffReadCallback, related to src/tiffio.c...

PT-2019-11531

Name of the Vulnerable Software and Affected Versions: nanosvg library versions after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 Description: The issue affects the nanosvg library, which is part of an SVG processing library. It is caused by a buffer overflow in the nsvg parseColorRGB functio...

CVE-2019-1010258: Out-of-bounds Write

nanosvg library nanosvg after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 is affected by: Buffer Overflow. The impact is: Memory corruption leading to at least DoS. More severe impact vectors need more investigation. The component is: it's part of a svg processing library. function...

Rockwell Automation 1799-D16U16BAGL 16 IN / 16 SRC OUT w/Analog General Purpose Discrete I/O

Binary data 752641.prm...

WS-2019-0516

open62541 before v1.0.1 and in v1.1-dev is vulnerable to use-of-uninitialized-value in json decode on src/uatypesencodingjson.c...

CVE-2017-7773: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...

CVE-2019-9736

DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...

PT-2019-19832

Name of the Vulnerable Software and Affected Versions jimmykuu Gopher version 2.0 Description The issue involves a DOM-based XSS that can be exploited through specific vectors, including the ' tag with SRC attributes containing data:image/svg+xml substrings until a patch is available. Restrict...