1592 matches found
CVE-2019-6228
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack...
COYO Cross-Site Scripting Vulnerability
COYO is a social intranet software. COYO suffers from a cross-site scripting vulnerability. The vulnerability is due to a lack of URL validation by the program and can be exploited by an attacker to execute javascript code in the user context using malicious use of missed access...
Security Updates for Microsoft Office Viewers And Compatibility Products (February 2019)
The Microsoft Office Viewers and Compatibility Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Microsoft Office does not validate URLs. An attacker could send a victim a specially crafted file,...
Description of the security update for Office 2010: February 12, 2019
Description of the security update for Office 2010: February 12, 2019 Summary This security update resolves a security feature bypass vulnerability that exists when Microsoft Office does not validate URLs. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...
Description of the security update for Office 2016: February 12, 2019
None None...
Description of the security update for Word Viewer: February 12, 2019
None None...
UBUNTU-CVE-2018-4345
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
CVE-2018-4345
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
SAP NetWeaver Open Redirect Vulnerability
SAP NetWeaver is an integrated, service-oriented application platform that provides a development and runtime environment for SAP applications. An open redirection vulnerability exists in SAP NetWeaver, which stems from the program failing to adequately validate URLs, and can be exploited by a...
CVE-2018-2476
Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site...
Design/Logic Flaw
Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site...
CVE-2018-2476
Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site...
CVE-2018-2476
CVE-2018-2476 is a SAP NetWeaver open redirect vulnerability caused by insufficient URL validation in forums, affecting SAP NetWeaver versions 7.30, 7.31, and 7.40. The vulnerability enables redirection to a malicious site and requires user interaction to exploit. CVSS details in the record indic...
CVE-2018-4309
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
Security Bulletin: Cross-site scripting vulnerability in WebSphere Lombardi Edition redirect-login mechanism (CVE-2014-6101)
Summary WebSphere Lombardi Edition uses a mechanism to silently login users who have previously authenticated themselves. This mechanism is vulnerable to cross-site scripting attacks. Vulnerability Details CVE ID:CVE-2014-6101 DESCRIPTION: WebSphere Lombardi Edition is vulnerable to cross-site...
Path traversal
node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path...
PT-2018-6052 · Github · Uri.Js
Name of the Vulnerable Software and Affected Versions: uri-js versions 2.1.1 and earlier Description: The issue arises from a regular expression used by uri-js to validate URLs, which is vulnerable to redos. This vulnerability causes the program to hang and results in 100% CPU usage when attempti...
Amazon Linux 2 : ruby (ALAS-2018-983)
Path traversal when writing to a symlinked basedir outside of the root RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal...