15227 matches found
CVE-2026-34848
The affected software is hoppscotch (open source API development ecosystem). A stored XSS vulnerability exists prior to version 2026.3.0 in the team member overflow tooltip triggered by a display name. The issue is resolved in version 2026.3.0. Exploitation details are not provided beyond the sto...
EUVD-2026-18536
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0...
CVE-2026-34848
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0...
CVE-2026-34848 hoppscotch: Stored XSS in team member overflow tooltip via display name
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0...
CVE-2026-34848 hoppscotch: Stored XSS in team member overflow tooltip via display name
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0...
CVE-2026-34848 hoppscotch: Stored XSS in team member overflow tooltip via display name
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0...
libpng: LIBPNG has a heap buffer overflow in png_set_quantize
A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...
libpng: LIBPNG has a heap buffer overflow in png_set_quantize
A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...
libpng: LIBPNG has a heap buffer overflow in png_set_quantize
A heap based buffer overflow flaw has been discovered in LibPNG. Prior to version 1.6.55, an out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported b...
ImageMagick < 6.9.13-43 / 7.x < 7.1.2-18 Multiple Vulnerabilities
The remote host has a version of ImageMagick installed that is prior to 6.9.13-43 and 7.x prior to 7.1.2-18. It is, therefore, affected by multiple vulnerabilities: - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an...
CVE-2026-34848: Improper Neutralization of Input During Web Page Generation
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0...
Hoppscotch 跨站脚本漏洞
Hoppscotch is an open-source API development environment created by Hoppscotch. Versions of Hoppscotch prior to 2026.3.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the display names in tooltips created by team members, which had a storage-based cross-site...
PT-2026-29888
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0...
CVE-2026-32607
Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, when the hidden prioritizefullnameinux site setting is enabled defaults to false, requires console access to change, user...
GHSA-W4HP-W536-JG64 AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call Notification
Summary The AVideo YPTSocket plugin's caller feature renders incoming call notifications using the jQuery Toast Plugin, passing the caller's display name directly as the heading parameter. The toast plugin constructs the heading as raw HTML '' + heading + '' and inserts it into the DOM via jQuery...
EUVD-2026-17646
AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call Notification...
[SECURITY] Fedora 43 Update: gstreamer1-vaapi-1.26.11-1.fc43
A collection of GStreamer plugins to let you make use of VA API video acceleration from GStreamer applications. Includes elements for video decoding, display, encoding and post-processing using VA API subject to hardware limitations...
The vulnerability of the display_relocations function in the GNU Binutils development environment allows a attacker to trigger a service failure.
The vulnerability of the displayrelocations function in the GNU Binutils development environment is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the `mtk_drm_crtc_create()` function in the drivers/gpu/drm/mediatek/mtk_drm_crtc.c driver code of the Direct Rendering Infrastructure (DRI) subsystem for Mediatek graphics cards in Linux kernels allows a malicious actor to cause a service failure.
The vulnerability of the mtkdrmcrtccreate function in the drivers/gpu/drm/mediatek/mtkdrmcrtc.c driver for the Direct Rendering Infrastructure DRI of Mediatek graphics cards in Linux operating systems is related to the lack of checking for the return value. Exploiting this vulnerability can allow...
