EUVD-2025-175726

Malicious code in view-object-promise-xi-table npm...

Mozilla: Unintended access to a privileged JSONView object

A vulnerability was found in Mozilla Firefox and Thunderbird. Privileged JSONView objects that have been cloned into content can be accessed using a form with a data URI. This flaw bypasses existing defense-in-depth mechanisms and can be exploited over the network...

Foxit Reader and Foxit PhantomPDF for Windows Resource Management Error Vulnerability (CNVD-2019-13814)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in the XFA CXFAFFDocView object in Foxit Reader 9.4.1.16828 and earlier versions, Foxit PhantomPDF 8.3.9.41099 and earlier versions, and Foxit PhantomPDF...

PT-2019-18321 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.4.0.16811 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2014-6340

Name of the Vulnerable Software and Affected Versions Gallery Objects plugin version 0.4 for WordPress Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the viewid parameter in a go view object action to the...

Cross site scripting

Oracle Mojarra 1.214 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary Expression Language EL statements v...

CVE-2010-2086: Improper Neutralization of Input During Web Page Generation

Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary Expression Language EL statements via vectors that...

CVE-2010-2087: Improper Neutralization of Input During Web Page Generation

Oracle Mojarra 1.214 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary Expression Language EL statements v...