3526 matches found
[SECURITY] Fedora 35 Update: golang-k8s-kube-aggregator-1.22.0-4.fc35
Aggregator for Kubernetes-style API servers: dynamic registration, discovery summarization, secure proxy...
[SECURITY] Fedora 35 Update: golang-github-martinhoefling-goxkcdpwgen-0.1.0-2.fc35
xkcd style password generator library and cli tool...
[SECURITY] Fedora 35 Update: golang-github-gucumber-0-0.23.20190703git7d5c79e.fc35
An implementation of Cucumber BDD-style testing for Go...
[SECURITY] Fedora 35 Update: age-1.0.0-5.fc35
A simple, modern and secure encryption tool and Go library with small explicit keys, no config options, and UNIX-style composability...
Cross-site Scripting (XSS)
rails-html-sanitizer is vulnerable to cross-site scripting attacks. An attacker is able to inject and execute malicious javascript through the sanitizecss function when the library is configured to override the style tags to allow both select and style elements...
Fedora: Security Advisory for golang-github-martinhoefling-goxkcdpwgen (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-k8s-kube-aggregator (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
quic-go 资源管理错误漏洞
quic-go is an implementation of the QUIC protocol, RFC 9000 protocol in Go by Lucas Clemente, a personal developer. A resource management error vulnerability exists in quic-go version 0.27.0 and earlier. A remote attacker can cause a denial of service by sending a Slowloris variant of an incomple...
Fedora: Security Advisory for golang-github-gucumber (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-github-martinhoefling-goxkcdpwgen-0.1.0-2.fc36
xkcd style password generator library and cli tool...
[SECURITY] Fedora 36 Update: golang-github-gucumber-0-0.23.20190703git7d5c79e.fc36
An implementation of Cucumber BDD-style testing for Go...
[SECURITY] Fedora 36 Update: age-1.0.0-5.fc36
A simple, modern and secure encryption tool and Go library with small explicit keys, no config options, and UNIX-style composability...
style-affaire.de Cross Site Scripting vulnerability OBB-2715287
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mozilla: CSP bypass enabling stylesheet injection
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of an attacker that can inject CSS into stylesheets accessible via internal URIs, such as resources. In doing so, they can bypass a page's Content Security Policy...
Mozilla: CSP bypass enabling stylesheet injection
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of an attacker that can inject CSS into stylesheets accessible via internal URIs, such as resources. In doing so, they can bypass a page's Content Security Policy...
Mozilla: CSP bypass enabling stylesheet injection
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of an attacker that can inject CSS into stylesheets accessible via internal URIs, such as resources. In doing so, they can bypass a page's Content Security Policy...
Mozilla: CSP bypass enabling stylesheet injection
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of an attacker that can inject CSS into stylesheets accessible via internal URIs, such as resources. In doing so, they can bypass a page's Content Security Policy...
crys-style-animation.fr Cross Site Scripting vulnerability OBB-2700091
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mermaid 跨站脚本漏洞
Mermaid is a software application. Create charts and visualizations using text and code. A cross-site scripting vulnerability exists in Mermaid versions prior to 9.1.3, which stems from the fact that whenever there is an actual match, the browser issues an http request to load a background image,...