View | Details | Raw Unified | Return to bug 246164
Collapse All | Expand All

(-)vuxml/vuln.xml (+25 lines)
Lines 58-63 Link Here
58
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
58
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
59
-->
59
-->
60
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
60
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
61
  <vuln vid="214091e5-8de8-11ea-ace3-0800276545c1">
62
    <topic>Cacti -- XSS exposure</topic>
63
    <affects>
64
      <package>
65
	<name>cacti</name>
66
	<range><lt>1.2.12</lt></range>
67
      </package>
68
    </affects>
69
    <description>
70
      <body xmlns="http://www.w3.org/1999/xhtml">
71
	<p>Cacti developer reports:</p>
72
	<blockquote cite="https://sourceforge.net/p/cacti/mailman/message/37000502/">
73
	  <p>Lack of escaping of color items can lead to XSS exposure.</p>
74
	</blockquote>
75
      </body>
76
    </description>
77
    <references>
78
      <url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7106</url>
79
    </references>
80
    <dates>
81
      <discovery>2020-05-03</discovery>
82
      <entry>2020-05-04</entry>
83
    </dates>
84
  </vuln>
85
61
  <vuln vid="57c1c2ee-7914-11ea-90bf-0800276545c1">
86
  <vuln vid="57c1c2ee-7914-11ea-90bf-0800276545c1">
62
    <topic>Squid -- multiple vulnerabilities</topic>
87
    <topic>Squid -- multiple vulnerabilities</topic>
63
    <affects>
88
    <affects>

Return to bug 246164