28453 matches found
CVE-2025-8082 Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'
Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...
CVE-2025-8082
Vuetify CVE-2025-8082 affects the VDatePicker component where the title-date-format property can output user-generated content which is assigned to innerHTML without sanitization, enabling Cross-Site Scripting. Affected versions are Vuetify 2.0.0 and above up to, but not including, 3.0.0. The iss...
CVE-2025-8082 Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'
Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...
CLSA-2025-1764769161 libsoup: Fix of 2 CVEs
CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic...
CVE-2025-12407
creationtimestamp| type| source ---|---|--- 2025-12-12 13:14:02+00:00| seen| https://gist.github.com/Darkcrai86/d5a1bfb13f4ef3579e5d65ee532a1af7 2025-12-12 15:30:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sfsneovt2x...
CVE-2025-11266
creationtimestamp| type| source ---|---|--- 2025-12-12 12:57:03+00:00| seen| https://infosec.exchange/users/morgenm/statuses/115706706172988875...
[SECURITY] [DLA 4403-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-4403-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 12, 2025 https://wiki.debian.org/LTS -...
CVE-2025-12883
creationtimestamp| type| source ---|---|--- 2025-12-12 08:29:24+00:00| seen| https://gist.github.com/Darkcrai86/ffe3dd244dded819c0961f79966856b8...
CVE-2025-14354
creationtimestamp| type| source ---|---|--- 2025-12-12 08:24:38+00:00| seen| https://gist.github.com/Darkcrai86/619265f864587e9b916f49ea137e97bc...
CVE-2025-13906
creationtimestamp| type| source ---|---|--- 2025-12-12 08:20:05+00:00| seen| https://gist.github.com/Darkcrai86/0c944cdb6917a4652d4d8247190da25e...
CVE-2025-13747
creationtimestamp| type| source ---|---|--- 2025-12-12 08:14:40+00:00| seen| https://gist.github.com/Darkcrai86/ab5f7777ccabd1c5cc828fa3c25bf271...
CVE-2025-66492
creationtimestamp| type| source ---|---|--- 2025-12-12 07:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rlq43ftq2c...
CVE-2025-14356
creationtimestamp| type| source ---|---|--- 2025-12-12 07:24:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rkmyc44q2c 2025-12-12 10:05:39+00:00| seen| https://gist.github.com/Darkcrai86/4fbe4ffe0037e17c4c2cbff19fdbf8b8...
CVE-2025-8082: Improper Neutralization of Input During Web Page Generation
Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...
PT-2025-50965
Name of the Vulnerable Software and Affected Versions Vuetify versions 2.0.0 through 2.9.9 Description A flaw exists in the 'VDatePicker' component of Vuetify that allows unsanitized HTML to be inserted into a webpage. This is due to the improper handling of the 'title-date-format' property, whic...
CVE-2024-58307
creationtimestamp| type| source ---|---|--- 2025-12-11 23:17:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qpgia7gt2c...
GHSA-5XX2-3Q9W-JPGF
creationtimestamp| type| source ---|---|--- 2025-12-11 21:59:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115703177084650374...
CVE-2025-58130
creationtimestamp| type| source ---|---|--- 2025-12-11 21:26:54+00:00| seen| https://seclists.org/oss-sec/2025/q4/268 2025-12-11 22:55:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m7qo72b4gy2f 2025-12-12 11:23:54+00:00| seen|...