Lucene search
+L

32 matches found

Debian
Debian
•added 2023/01/30 9:34 p.m.•23 views

[SECURITY] [DLA 3296-1] libhtml-stripscripts-perl security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3296-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 31, 2023 https://wiki.debian.org/LTS -...

7.5CVSS7.4AI score0.01116EPSS
SaveExploits1
NVD
NVD
•added 2023/01/21 1:15 a.m.•21 views

CVE-2023-24038

The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...

7.5CVSS7.5AI score0.01116EPSS
SaveExploits1References5
OSV
OSV
•added 2023/01/21 1:15 a.m.•38 views

CVE-2023-24038

The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...

7.5CVSS7.4AI score
SaveExploits0References5
Prion
Prion
•added 2023/01/21 1:15 a.m.•20 views

Hardcoded credentials

The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...

5CVSS7.3AI score0.01116EPSS
SaveExploits1References5Affected Software2
UbuntuCve
UbuntuCve
•added 2023/01/21 1:15 a.m.•101 views

CVE-2023-24038

The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...

7.5CVSS7.1AI score0.01116EPSS
SaveExploits1References4
CVE
CVE
•added 2023/01/21 12:00 a.m.•125 views

CVE-2023-24038

CVE-2023-24038 affects the Perl module HTML-StripScripts (through version 1.06). The vulnerability is a ReDoS due to catastrophic backtracking when parsing HTML containing certain style attributes, potentially impacting availability. Affected component is html-strip-scripts logic in Perl; multipl...

7.5CVSS7.3AI score0.01116EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2023/01/21 12:00 a.m.•41 views

CVE-2023-24038

The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...

7.6AI score0.01116EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/21 12:00 a.m.•3 views

CVE-2023-24038: Inefficient Regular Expression Complexity

The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...

7.5CVSS5.8AI score0.01116EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2023/01/21 12:00 a.m.•41 views

CVE-2023-24038

The HTML-StripScripts module through 1.06 for Perl allows hssattvalstyle ReDoS because of catastrophic backtracking for HTML content with certain style attributes...

7.5CVSS7.5AI score0.01116EPSS
SaveExploits1
CNNVD
CNNVD
•added 2023/01/21 12:00 a.m.•15 views

perl-html-stripscripts 安全漏洞

perl-html-stripscripts is a Perl library. A security vulnerability exists in perl-html-stripscripts version 1.06 and earlier. An attacker can exploit this vulnerability to perform catastrophic backtracking on HTML content with specific style attributes...

7.5CVSS7.3AI score0.01116EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2023/01/20 12:00 a.m.•9 views

PT-2023-1551 · Unknown +2 · Html-Stripscripts +2

Name of the Vulnerable Software and Affected Versions: HTML-StripScripts versions 1.06 and earlier Description: The issue is related to the hss attval style function in the HTML-StripScripts module, which allows ReDoS Regular expression Denial of Service due to catastrophic backtracking when...

7.8CVSS6.7AI score0.01116EPSS
SaveExploits1References33
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/30 12:00 a.m.•3 views

CVE-2007-5727: Improper Neutralization of Input During Web Page Generation

Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary web script or HTML via XSS sequences without SCRIPT tags in t...

4.3CVSS5.9AI score0.0192EPSS
SaveExploits0References2
Rows per page
Query Builder