Most recent entries from all

BREW-grip-CVE-2016-10516 — Pallets Werkzeug cross-site scripting vulnerability

Affected: Homebrew: grip

Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.

certfr-2024-avi-0366 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre el…

certfr-2024-avi-0366

cnvd-2017-36079

EUVD-2026-88500

fkie_cve-2016-10516

GHSA-h2fp-xgx6-xh6f — Pallets Werkzeug cross-site scripting vulnerability

Affected: PyPI: Werkzeug

gsd-2016-10516

PYSEC-2017-43

Affected: PyPI: werkzeug

RHSA-2019:3172 — Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update

python-werkzeug: Cross-site scripting in render_full function in debug/tbtools.py python-jinja2: Sandbox escape due to information disclosure via str.format rubygem-rack: Buffer size in multipart parser allows for denial of service dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents foreman: Recover of plaintext password or token for the compute resources foreman: authorization bypasses in foreman-tasks leading to information disclosure python-jinja2: str.format_map allows sandbox escape python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods katello: registry credentials are captured in plain text during repository discovery

UBUNTU-CVE-2016-10516

Affected: Ubuntu:14.04:LTS: python-werkzeug, Ubuntu:16.04:LTS: python-werkzeug