CVE-2026-18481

Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR 168 might allow an authenticated remote user to steal session tokens and escalate to full administrative control of the deployed instance via a crafted participanturl value containing a dangerous URI scheme. To...

CVE-2019-18481

...

CVE-2019-18481

CVE-2019-18481 is rejected and does not represent an active vulnerability entry.

CVE-2017-18481

cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface SEC-211...

CVE-2017-18481

cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface SEC-211...

CVE-2018-18481

CVE-2018-18481 affects libopencad 0.2.0, with a heap-based buffer over-read in ReadCHAR (lib/dwg/io.cpp) that can cause an application crash. Connected sources confirm the vulnerable component and function, describing the root cause as a read overrun in ReadCHAR leading to abnormal termination. T...