34 matches found
DEBIAN-CVE-2020-27511
An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...
CVE-2020-27511
An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...
CVE-2021-32696
The npm package "striptags" is an implementation of PHP's striptags in Typescript. In striptags before version 3.2.0, a type-confusion vulnerability can cause striptags to concatenate unsanitized strings when an array-like object is passed in as the html parameter. This can be abused by an attack...
CVE-2021-32696
The npm package "striptags" is an implementation of PHP's striptags in Typescript. In striptags before version 3.2.0, a type-confusion vulnerability can cause striptags to concatenate unsanitized strings when an array-like object is passed in as the html parameter. This can be abused by an attack...
Type confusion
The npm package "striptags" is an implementation of PHP's striptags in Typescript. In striptags before version 3.2.0, a type-confusion vulnerability can cause striptags to concatenate unsanitized strings when an array-like object is passed in as the html parameter. This can be abused by an attack...
CVE-2021-32696
The CVE-2021-32696 issue affects the npm package striptags (TypeScript implementation of PHP’s strip_tags). Before version 3.2.0 , passing an array-like object as the HTML argument can trigger a type-confusion that concatenates unsanitized strings, enabling a XSS when input shape is attacker-cont...
CVE-2021-32696 Passing in a non-string 'html' argument can lead to unsanitized output
The npm package "striptags" is an implementation of PHP's striptags in Typescript. In striptags before version 3.2.0, a type-confusion vulnerability can cause striptags to concatenate unsanitized strings when an array-like object is passed in as the html parameter. This can be abused by an attack...
@3eyes/3commerce (>=0.0.2 <=0.0.25), @acwars/hexo-reference (=1.0.0) +1062 more potentially affected by CVE-2021-32696 via striptags (>=1.0.0 <=3.1.1)
striptags NPM version =1.0.0, =0.0.2, =0.0.1, =0.16.9, =0.2.21, =0.3.18-beta.0, =0.1.0, =0.1.1, =1.0.0, =0.0.1, =1.1.73-beta.3, =1.3.19 and more Source cves: CVE-2021-32696 Source advisory: OSV:GHSA-QXG5-2QFF-P49R...
striptags 安全漏洞
striptags is a software package. A security vulnerability exists in striptags that stems from a type confusion vulnerability in striptags prior to version 3.2.0 that causes striptags to concatenate unprocessed strings when an array-like object is passed as an html parameter. An attacker can explo...
Yii Framwork CmsInput Improper XSS Filter
Yii framework CmsInput extension 1 improper XSS sanitation + Discovered by: Jos Wetzels + Affects: Yii framework CmsInput extension xssClean$this-stripTags$str; What happens is that stripTags is called on the user-supplied input before xssClean is called. stripTags is designed to eliminate all...
VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities (Windows)
The host is installed with VLC Media Player and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayerbofvulnfeb11win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities Windows Authors: Madhuri ...
CVE-2011-0522
The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...
CVE-2011-0522
The StripTags function in 1 the USF decoder modules/codec/subtitles/subsdec.c and 2 the Text decoder modules/codec/subtitles/subsusf.c in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "" in an MKV file, which trigger...
