CVE-2026-5159

creationtimestamp| type| source ---|---|--- 2026-05-05 06:48:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3lr4hz2p2h 2026-05-05 18:14:51+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3ml4s4z77en2l...

CVE-2026-5159 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter

The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagramfollowtext' setting in all versions up to, and including, 1.7.1056 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-5159

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue affects the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely. The exploit has...

CVE-2025-5159

creationtimestamp| type| source ---|---|--- 2025-05-25 23:46:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17517 2025-05-26 03:30:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq2adqwdjs2w...

CVE-2025-5159

CVE-2025-5159 affects H3C SecCenter SMP-E1114P02 up to 20250513. The issue is a path traversal in the Download function for /cfgFile/1/download caused by manipulation of the Name parameter. It can be initiated remotely, and the exploit has been disclosed publicly. Multiple sources corroborate the...

CVE-2023-5159

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

CVE-2010-5159

Race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2011-5159

Cross-site scripting XSS vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the subgroup parameter, a different vulnerability than CVE-2011-4942...

CVE-2009-5159

Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...

Linux Distros Unpatched Vulnerability : CVE-2024-5159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Microsoft Edge (Chromium) < 125.0.2535.67 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 125.0.2535.67. It is, therefore, affected by multiple vulnerabilities as referenced in the May 16, 2024 advisory. - Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to...

electron29 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-5499. Security: backported fix for CVE-2024-5493. Security: backported fix for CVE-2024-5494. Security: backported fix for CVE-2024-5495. Security: backported fix for CVE-2024-5496...

Fedora: Security Advisory (FEDORA-2024-87bb7ffab1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-44edce9689)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0194 Updated chromium-browser-stable packages fix security vulnerabilities

The chromium-browser-stable package has been updated to the 125.0.6422.76 release. It includes 6 security fixes Please, do note, that since some versions ago, only x8664 is supported. i586 support for linux was stopped some years ago and the community is not able to provide patches anymore for th...

Chromium: CVE-2024-5159 Heap buffer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

openSUSE Security Advisory (openSUSE-SU-2024:0137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : chromium (2024-44edce9689)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-44edce9689 advisory. update to 125.0.6422.76 High CVE-2024-5157: Use after free in Scheduling High CVE-2024-5158: Type Confusion in V8 High CVE-2024-5159: Heap buffer...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2024:0137-1 Rating: important References: 1224818 Cross-References: CVE-2024-5157 CVE-2024-5158 CVE-2024-5159 CVE-2024-5160 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes four vulnerabilitie...

[SECURITY] [DSA 5696-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5696-1 [email protected] https://www.debian.org/security/ Andres Salomon May 22, 2024 https://www.debian.org/security/faq -...