Lucene search
K

12 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.1 views

SUSE CVE-2008-5712

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service application crash via 1 a long COLOR attribute in an HR element; or a long a BGCOLOR or b BORDERCOLOR attribute in a 2 TABLE, 3 TD, or 4 TR element. NOTE: the FONT vector is already covered by CVE-2008-451...

5CVSS6.8AI score0.04516EPSS
Exploits0References3
Veracode
Veracode
added 2017/01/04 5:3 a.m.7 views

Cross-Site Scripting (XSS)

html-pipeline is vulnerable to cross-site scripting XSS attacks. The sanitization filter whitelists table elements, allowing a malicious user to inject and execute arbitrary scripts...

6.1AI score
Exploits0
NVD
NVD
added 2015/11/13 3:59 a.m.18 views

CVE-2015-6045

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript that improperly interacts with use of the Cascading Style Sheets CSS...

9.3CVSS7.6AI score0.34437EPSS
Exploits0References3
Prion
Prion
added 2015/11/13 3:59 a.m.17 views

Memory corruption

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript that improperly interacts with use of the Cascading Style Sheets CSS...

9.3CVSS8.2AI score0.34437EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2015/11/13 2:0 a.m.21 views

CVE-2015-6045

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted JavaScript that improperly interacts with use of the Cascading Style Sheets CSS...

8.3AI score0.34437EPSS
Exploits0References3
CNVD
CNVD
added 2015/11/07 12:0 a.m.2 views

Mozilla Firefox Features Denial of Service Vulnerability

Mozilla Firefox is an open source web browser. The Mozilla Firefox accessibility-tools feature on the OS X platform fails to properly interact with the TABLE element, allowing remote attackers to perform a denial-of-service attack by referencing the row index using the NSAccessibilityIndexAttribu...

7.5CVSS8.9AI score0.02655EPSS
Exploits0References1
Prion
Prion
added 2015/11/05 5:59 a.m.16 views

Code injection

The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...

7.5CVSS8.4AI score0.02655EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2015/11/05 2:0 a.m.19 views

CVE-2015-7192

The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value...

9.8AI score0.02655EPSS
Exploits0References6
Prion
Prion
added 2011/01/18 6:3 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter...

4.3CVSS6.1AI score0.00329EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2011/01/18 5:0 p.m.14 views

CVE-2010-4646

Cross-site scripting XSS vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter...

5.6AI score0.00329EPSS
Exploits0References5
NVD
NVD
added 2007/02/23 3:28 a.m.14 views

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

6.5CVSS6.5AI score0.24592EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2007/02/23 12:0 a.m.2 views

PT-2007-1310 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6.0.2900 SP2 and earlier Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing a table element with a CSS attribute that sets the position. This...

6.5CVSS7.4AI score0.24592EPSS
Exploits0References5
Rows per page
Query Builder