16691 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-117943
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...
Linux Distros Unpatched Vulnerability : CVE-2026-117950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird...
Linux Distros Unpatched Vulnerability : CVE-2026-117930
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...
Linux Distros Unpatched Vulnerability : CVE-2026-117998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...
Linux Distros Unpatched Vulnerability : CVE-2026-117936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...
Linux Distros Unpatched Vulnerability : CVE-2026-117967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
Linux Distros Unpatched Vulnerability : CVE-2026-117931
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbir...
PT-2026-129182
Name of the Vulnerable Software and Affected Versions happy-dom versions prior to 20.14.6 Description Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. The CookieContainer in src/cookie/CookieContainer.ts does not correctly validate or match Domain...
PT-2026-129180
Name of the Vulnerable Software and Affected Versions happy-dom versions prior to 21.0.0 Description Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. When parsing untrusted HTML on the server, the software loads iframe src URLs and link...
CVE-2026-110662: mxchat MxChat – AI Chatbot & Content Generation for WordPress: The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored DOM-Based…
The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feedback' parameter in all versions up to, and including, 3.2.25 due to insufficient input sanitization and output escaping. This makes it possible for...
Linux Distros Unpatched Vulnerability : CVE-2026-118015
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118015 Note that Nessus relies on th...
Linux Distros Unpatched Vulnerability : CVE-2026-118008
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118008 Note that Nessus relies ...
David Ortner Happy DOM server-side request forgery vulnerability
David Ortner: Versions prior to Happy DOM 21.0.2 contain a server-side request forgery vulnerability. This occurs because ServerRendererServer accepts unauthenticated HTTP/2 requests and invokes fetch without first verifying whether the resolved origin is trusted. As a result, attackers can explo...
Linux Distros Unpatched Vulnerability : CVE-2026-117881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...
CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an INPLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutralized, so handlers like img onerror fire after sanitize...
WordPress Document Embedder – let visitors read files without downloading plugin <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Document Embedder versions = 2.4.0...
SUSE CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an INPLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutralized, so handlers like img onerror fire after sanitize...
SUSE CVE-2026-117860
Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...