CVE-2026-106134

Progress Software KendoReact versions 1.3.0 through 16.1.0 are vulnerable to a Cross-Site Scripting (XSS) flaw in the Menu component (@progress/kendo-react-layout). A low-privileged attacker capable of influencing the Menu item data can execute arbitrary JavaScript within the application's origin...

WordPress Page Layout builder v1.9.3 - Cross-Site Scripting

WordPress plugin Page-layout-builder v1.9.3 contains a cross-site scripting vulnerability. id: CVE-2016-1000141 info: name: WordPress Page Layout builder v1.9.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress plugin Page-layout-builder v1.9.3 contains a cross-site...

PcapViz

PcapViz PcapViz draws networks as device topologies and as information flows using the packet information in pcap files captured from a network device using tcpcap or other capture software. It filters and optionally displays the captured packets at any one of 3 "layers". These are: device level...

firefox: Frame poisoning in the Layout component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Frame poisoning in the Layout component...

firefox: Incorrect boundary conditions in the Layout component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout component...

firefox: Integer overflow in the Layout: Text and Fonts component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Layout: Text and Fonts component...

firefox: Integer overflow in the Layout: Text and Fonts component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Layout: Text and Fonts component...

firefox: Frame poisoning in the Layout component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Frame poisoning in the Layout component...

firefox: Incorrect boundary conditions in the Layout component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout component...

CVE-2026-84183

Apache OFBiz version 24.09 before 24.09.08 is vulnerable to Incorrect Authorization in the updateLayout simple-method located in applications/content/minilang/layout/LayoutEvents.xml. A remote authenticated attacker with OFBTOOLS_VIEW and CONTENTMGR_VIEW privileges can execute arbitrary commands ...

CVE-2026-118027

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44...

CVE-2026-76806

Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData read attacker-controlled project id values from projects.json in uploaded ZIP imports and concatenated them into filesystem paths without validation. Because...

CVE-2026-121044

An use after free flaw was found in the Layout component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568832157 Mitigation --- CME Mitigation Guidance 2026-11-06 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of...

SUSE CVE-2026-121044

Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121044

Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

OpenJDK 8 <= 8u372 / 11.0.0 <= 11.0.19 / 17.0.0 <= 17.0.7 / 20.0.0 <= 20.0.1 Multiple Vulnerabilities (2023-07-18)

The version of OpenJDK installed on the remote host is 8 prior to or at 8u372 / 11.0.0 prior to or at 11.0.20 / 17.0.0 prior to or at 17.0.8 / 20.0.0 prior to or at 20.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-07-18 advisory. Please Note: Java CVEs do n...

PT-2026-137108

Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData read attacker-controlled project id values from projects.json in uploaded ZIP imports and concatenated them into filesystem paths without validation. Because...

CVE-2026-120572

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout: Block and Inline component Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a...

CVE-2026-121044

Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-121044

Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...