GHSA-9959-C6Q6-6QP3 Moderate severity vulnerability that affects validator

Withdrawn: Duplicate of GHSA-79mx-88w7-8f7q...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7454 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7454 Source advisory: GHSA-Q4QQ-FM7Q-CWP5...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7452 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7452 Source advisory: GHSA-RH6C-Q938-3R9Q...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7453 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7453 Source advisory: OSV:GHSA-552W-RQG8-GXXM...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7454 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7454 Source advisory: OSV:GHSA-Q4QQ-FM7Q-CWP5...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7451 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7451 Source advisory: OSV:GHSA-QPJP-7RP2-9C3F...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7451 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7451 Source advisory: GHSA-QPJP-7RP2-9C3F...

GHSA-RH6C-Q938-3R9Q Moderate severity vulnerability that affects validator

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

GHSA-Q4QQ-FM7Q-CWP5 Multiple XSS Filter Bypasses in validator

Versions of validator prior to 1.1.0 are affected by several cross-site scripting vulnerabilities due to bypasses discovered in the blacklist-based filter. Proof of Concept Various inputs that could bypass the filter were discovered: Improper parsing of nested tags: This is a test Incomplete...

GHSA-QPJP-7RP2-9C3F Moderate severity vulnerability that affects validator

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7452 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7452 Source advisory: OSV:GHSA-RH6C-Q938-3R9Q...

input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7453 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7453 Source advisory: GHSA-552W-RQG8-GXXM...

Moderate severity vulnerability that affects validator

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag...

Moderate severity vulnerability that affects validator

Withdrawn: Duplicate of GHSA-79mx-88w7-8f7q...

Moderate severity vulnerability that affects validator

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via a crafted javascript URI...

Multiple XSS Filter Bypasses in validator

Versions of validator prior to 1.1.0 are affected by several cross-site scripting vulnerabilities due to bypasses discovered in the blacklist-based filter. Proof of Concept Various inputs that could bypass the filter were discovered: Improper parsing of nested tags: This is a test Incomplete...

Infogram: Stored XSS in the Custom Logo link (non-Basic plan required)

Description Hello. Recently i contacted with Infogram, and requested trial of the Business version to test some features, which was unavailable in the Basic version. I discovered the stored cross-site scripting issue in the Custom Logo link. F232084 There was some URL checks in place, but i was...

Chef Information Disclosure Vulnerability

Chef is written by Ruby form management software , it is a pure Ruby domain-specific language DSL to save the system configuration "recipes recipes" or "cookbook cookbooks". chef Developed by Opscode , and released under the Apache protocol version 2.0 open source . A security vulnerability exist...

RHEL 6 : Red Hat JBoss Enterprise Application Platform (RHSA-2017:2809)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2809 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

Privilege Escalation

hibernate-validator is vulnerable to privilege escalation attacks. When the security manager is used, its reflective permissions allow the access to private members...