Archive
27 January 2015
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium —
VBScript Content Injection in marked
Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript tag in a link.