Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
validator vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2013-7452
The validator module prior to 1.1.0 for Node.js allows remote malicious users to bypass the cross-site scripting (XSS) filter via a crafted javascript URI.
Nodejs Node.js
4.3
CVSSv2
CVE-2013-7453
The validator module prior to 1.1.0 for Node.js allows remote malicious users to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing.
Nodejs Node.js
4.3
CVSSv2
CVE-2013-7454
The validator module prior to 1.1.0 for Node.js allows remote malicious users to bypass the cross-site scripting (XSS) filter via nested forbidden strings.
Nodejs Node.js
4.3
CVSSv2
CVE-2014-9772
The validator package prior to 2.0.0 for Node.js allows remote malicious users to bypass the cross-site scripting (XSS) filter via hex-encoded characters.
Nodejs Node.js
6.8
CVSSv2
CVE-2016-7980
Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and previous versions allows remote malicious users to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted valider_xml re...
Spip Spip
1 EDB exploit
6.4
CVSSv2
CVE-2016-1182
ActionServlet.java in Apache Struts 1 1.x up to and including 1.3.10 does not properly restrict the Validator configuration, which allows remote malicious users to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a related issue to CVE-20...
Apache Struts 1.0
Apache Struts 1.1
Apache Struts 1.2.5
Apache Struts 1.2.6
Apache Struts 1.3.9
Apache Struts 1.3.10
Apache Struts 1.0.2
Apache Struts 1.2.1
Apache Struts 1.2.2
Apache Struts 1.2.9
Apache Struts 1.3.5
Apache Struts 1.2.3
Apache Struts 1.2.4
Apache Struts 1.3.7
Apache Struts 1.3.8
Apache Struts 1.3.6
Apache Struts 1.0.1
Apache Struts 1.2.0
Apache Struts 1.2.7
Apache Struts 1.2.8
1 Github repository
4.3
CVSSv2
CVE-2015-5144
Django prior to 1.4.21, 1.5.x up to and including 1.6.x, 1.7.x prior to 1.7.9, and 1.8.x prior to 1.8.3 uses an incorrect regular expression, which allows remote malicious users to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an ...
Canonical Ubuntu Linux 15.04
Canonical Ubuntu Linux 14.04
Canonical Ubuntu Linux 15.10
Canonical Ubuntu Linux 12.04
Djangoproject Django
Djangoproject Django 1.5
Djangoproject Django 1.5.2
Djangoproject Django 1.5.3
Djangoproject Django 1.6
Djangoproject Django 1.6.4
Djangoproject Django 1.6.5
Djangoproject Django 1.7
Djangoproject Django 1.7.5
Djangoproject Django 1.7.6
Djangoproject Django 1.8.2
Djangoproject Django 1.5.4
Djangoproject Django 1.5.5
Djangoproject Django 1.6.6
Djangoproject Django 1.6.7
Djangoproject Django 1.7.7
Djangoproject Django 1.7.8
Djangoproject Django 1.5.1
4.6
CVSSv2
CVE-2014-0067
The "make check" command for the test suites in PostgreSQL 9.3.3 and previous versions does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging a...
Apple Mac Os X 10.10.4
Apple Mac Os X Server 5.0.3
Postgresql Postgresql 9.1.7
Postgresql Postgresql 9.1.6
Postgresql Postgresql 9.0.8
Postgresql Postgresql 9.1.5
Postgresql Postgresql 9.1.2
Postgresql Postgresql 9.1.3
Postgresql Postgresql 9.0.6
Postgresql Postgresql 9.0.5
Postgresql Postgresql 9.0.10
Postgresql Postgresql 9.0
Postgresql Postgresql 8.4.3
Postgresql Postgresql 8.4.2
Postgresql Postgresql 8.4.16
Postgresql Postgresql 8.4.1
Postgresql Postgresql 9.3.2
Postgresql Postgresql 9.1.11
Postgresql Postgresql 9.1.10
Postgresql Postgresql 9.2
Postgresql Postgresql 9.1.8
Postgresql Postgresql 9.1.1
6.8
CVSSv2
CVE-2011-3020
Unspecified vulnerability in the Native Client validator implementation in Google Chrome prior to 17.0.963.56 has unknown impact and remote attack vectors.
Google Chrome
5
CVSSv2
CVE-2011-4528
Unbound prior to 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response.
Unbound Unbound 1.4.6
Unbound Unbound 1.4.5
Unbound Unbound 1.3.3
Unbound Unbound 1.3.2
Unbound Unbound 1.0.2
Unbound Unbound 1.0.1
Unbound Unbound 1.0.0
Unbound Unbound 0.7
Unbound Unbound 0.6
Unbound Unbound 1.4.12
Unbound Unbound
Unbound Unbound 1.4.10
Unbound Unbound 1.4.9
Unbound Unbound 1.4.2
Unbound Unbound 1.4.1
Unbound Unbound 1.2.1
Unbound Unbound 1.2.0
Unbound Unbound 0.09
Unbound Unbound 0.8
Unbound Unbound 0.3
Unbound Unbound 0.2
Unbound Unbound 1.4.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316
SQL injection
type confusion
CVE-2024-20697
CVE-2024-4344
local
CVE-2024-30043
CVE-2024-3821
CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »