Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue affects Responsive Slider: from n/a through 0.1.9.
A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation is known to be difficult. There are still doubts about whether this vulnerability truly exists. The vendor explains: "[T]he entry s
Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5.
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5.
Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158.
Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158.
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158.
Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158.
Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158.
Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158.
Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158.
Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158.
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.