Filedescriptor

Pesquisador deCure53
#18826de 60,403
16.5CVSS total
Vulnerabilidades · 3
Média
3
PT-2016-6026
2016-05-22
6.1
CVE-2016-4566
Plupload
Plupload
The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack.
PT-2016-6027
2016-05-06
6.1
CVE-2016-4567
John Dyer
Mediaelement.Js
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the `jsinitfunction` parameter. This can be demonstrated by using "jsinitfunctio%gn" as an example of the obfuscated form.
PT-2015-5194
2015-07-21
4.3
CVE-2015-1287
Opera
Opera
The issue enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type. This allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to core/fetch/CSSStyleSheetResource.cpp.