MS09-043: Description of the security update for Office 2003 Web Components for the 2007 Office system: August 11, 2009

MS09-043: Description of the security update for Office 2003 Web Components for the 2007 Office system: August 11, 2009 INTRODUCTION Microsoft has released security bulletin MS09-043. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

Hewlett Packard Enterprise Universal CMDB Product Installation File Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privilege on vulnerable installations of Hewlett Packard Enterprise Universal CMDB. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

CVE-2018-10000

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

CVE-2018-10000

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

CVE-2018-10000

CVE-2018-10000 describes a universal XSS (UXSS) in the Video Downloader professional extension for Chrome, prior to 2018-04-05. The issue arises via vectors related to a link64_msgAddLinks event, allowing an attacker to trigger cross-site scripting within the extension context. The NVD entry list...

CVE-2018-10000

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

Video Downloader Universal Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Video Downloader Extension: Universal XSS Browsing through the list of most popular Chrome extensions, I noticed this extension with 4M users:...

CVE-2017-2492

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...

CVE-2017-2492

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...

CVE-2017-2492

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that triggers...

CVE-2017-2492

CVE-2017-2492 is an UXSS vulnerability in Apple’s JavaScriptCore affecting iOS <10.3, Safari <10.1, and tvOS

universalhumanenergy.com XSS vulnerability

Open Bug Bounty ID: OBB-590766 Description| Value ---|--- Affected Website:| universalhumanenergy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

universal-tech.com XSS vulnerability

Open Bug Bounty ID: OBB-590764 Description| Value ---|--- Affected Website:| universal-tech.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The bundled Atlassian Universal Plugin Manager plugin had a XSS issue - CVE-2018-5229

The version of the bundled Atlassian Universal Plugin Manager plugin had a cross site scripting vulnerability XSS. See https://ecosystem.atlassian.net/browse/UPM-5871 for more details...

The bundled Atlassian Universal Plugin Manager plugin had a XSS issue - CVE-2018-5229

The version of the bundled Atlassian Universal Plugin Manager plugin had a cross site scripting vulnerability XSS. See https://ecosystem.atlassian.net/browse/UPM-5871 for more details...

March 23, 2018—KB4088881 (Preview of Monthly Rollup)

None None...

March 22, 2018—KB4088882 (Preview of Monthly Rollup)

None None...

Illegal Memory Access Vulnerability in Lovecraft Universal Player

Lovecraft Universal Player is a universal video and audio player from Lovecraft. A QiYi Universal Player suffers from an illegal memory access vulnerability when handling special avi files, which can be exploited by an attacker to cause a denial of service attack...