318 matches found
SUSE CVE-2013-1697
The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote attackers to execute arbitrary JavaScript code with...
SUSE CVE-2015-4599
The SoapFault::toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service application crash, or possibly execute arbitrary code via an unexpected data type, related to a...
SUSE CVE-2015-8438
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...
apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.toString
Detailed Report: https://oss-fuzz.com/testcase?key=6395940672241664 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
guava:HashingFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>
Project: https://github.com/google/guava.git Detailed Report: https://oss-fuzz.com/testcase?key=5708235981586432 Project: guava Fuzzing Engine: libFuzzer Fuzz Target: HashingFuzzer Job Type: libfuzzerasanguava Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
PT-2022-37217
Name of the Vulnerable Software and Affected Versions Apache Commons JXPath affected versions not specified Description A security exception crash has been reported in Apache Commons JXPath. The crash occurs in the toString function of CoreFunction and involves the append method of...
apache-commons-jxpath:JXPathFuzzer: Uncaught exception in java.base/java.lang.StringBuffer.append
Detailed Report: https://oss-fuzz.com/testcase?key=5062161688297472 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...
CVE-2022-25875
The package svelte before 3.49.0 are vulnerable to Cross-site Scripting XSS due to improper input sanitization and to improper escape of attributes when using objects during SSR Server-Side Rendering. Exploiting this vulnerability is possible via objects with a custom toString function...
Cross site scripting
The package svelte before 3.49.0 are vulnerable to Cross-site Scripting XSS due to improper input sanitization and to improper escape of attributes when using objects during SSR Server-Side Rendering. Exploiting this vulnerability is possible via objects with a custom toString function...
CVE-2022-25875
The package svelte before 3.49.0 are vulnerable to Cross-site Scripting XSS due to improper input sanitization and to improper escape of attributes when using objects during SSR Server-Side Rendering. Exploiting this vulnerability is possible via objects with a custom toString function...
CVE-2022-25875 Cross-site Scripting (XSS)
The package svelte before 3.49.0 are vulnerable to Cross-site Scripting XSS due to improper input sanitization and to improper escape of attributes when using objects during SSR Server-Side Rendering. Exploiting this vulnerability is possible via objects with a custom toString function...
CVE-2022-25875 Cross-site Scripting (XSS)
The package svelte before 3.49.0 are vulnerable to Cross-site Scripting XSS due to improper input sanitization and to improper escape of attributes when using objects during SSR Server-Side Rendering. Exploiting this vulnerability is possible via objects with a custom toString function...
CVE-2022-25875
The package svelte before 3.49.0 are vulnerable to Cross-site Scripting XSS due to improper input sanitization and to improper escape of attributes when using objects during SSR Server-Side Rendering. Exploiting this vulnerability is possible via objects with a custom toString function...
Svelte cross-site scripting vulnerabilities
svelte is a new way to build web applications open-sourced by Svelte. A security vulnerability exists in svelte versions prior to 3.49.0, which stems from improper input cleanup in the toString function...
PT-2022-17581
Name of the Vulnerable Software and Affected Versions svelte versions prior to 3.49.0 Description The issue arises from improper input sanitization and improper escape of attributes when using objects during Server-Side Rendering SSR, leading to Cross-site Scripting XSS. This can be exploited via...
CVE-2022-25875: Improper Neutralization of Input During Web Page Generation
The package svelte before 3.49.0 are vulnerable to Cross-site Scripting XSS due to improper input sanitization and to improper escape of attributes when using objects during SSR Server-Side Rendering. Exploiting this vulnerability is possible via objects with a custom toString function...
Cross-site Scripting (XSS)
Overview svelte is a package for building web applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper input sanitization and to improper escape of attributes when using objects during SSR Server-Side Rendering. Exploiting this vulnerability is...
Unhandled crash in npm posix
This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable not a function, and then it will crash with type-check...
GHSA-27MX-GCHC-6XJP Unhandled crash in npm posix
This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable not a function, and then it will crash with type-check...
CVE-2022-21211
This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable not a function, and then it will crash with type-check...