Archive

September 2017

Vulnerabilities first published in this month (UTC), newest first.

← August 2017 2017 / September October 2017 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2017-14735 Public exploit

OWASP AntiSamy Cross-site Scripting vulnerability

OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of &colon; to construct a javascript: URL.

libowasp-antisamy-java org.owasp.antisamy:antisamy libowasp-antisamy-java Debian Ubuntu Maven

Sep 25, 2017
Medium 6.1

CVE-2015-6748 Public exploit

Improper Neutralization of Input During Web Page Generation in Jsoup

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

org.jsoup:jsoup jsoup Debian Maven

Sep 25, 2017