10729 matches found
EUVD-2026-38408
Zephyr's ext2 directory-entry parser does not fully validate on-disk directory entry structure before copying the entry name and advancing traversal state. In ext2fetchdirentry subsys/fs/ext2/ext2diskops.c, the code only checks denamelen = EXT2MAXFILENAME and then copies the name with memcpy...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ImageColumn or ImageEntry components rendering raw database values without escaping HTML. An attacker can execute arbitrary HTML or JavaScript in the context of affected users by injecting malicious...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ImageColumn or ImageEntry components rendering raw database values without escaping HTML. An attacker can execute arbitrary HTML or JavaScript in the context of affected users by injecting malicious...
MINI-Q9WG-8P57-VRGM
Bulletin has no description...
MINI-5799-42J9-578M
Bulletin has no description...
MINI-FRX7-RPPV-HPC2
Bulletin has no description...
CVE-2026-48167
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the ImageColumn and ImageEntry components render raw database values without escaping HTML. Where the data passed to these components isn't validated, an attacker could plant...
CVE-2026-48167 Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the ImageColumn and ImageEntry components render raw database values without escaping HTML. Where the data passed to these components isn't validated, an attacker could plant...
CVE-2026-48167
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the ImageColumn and ImageEntry components render raw database values without escaping HTML. Where the data passed to these components isn't validated, an attacker could plant...
MINI-X8F9-2VH5-4RRX
Bulletin has no description...
MINI-MG8F-4WMP-Q393
Bulletin has no description...
MINI-RPQ9-PRQC-MFJC
Bulletin has no description...
MINI-549V-37V4-3M92
Bulletin has no description...
MINI-XVHP-F93W-5237
Bulletin has no description...
MINI-G36P-JFP2-5J65
Bulletin has no description...
MINI-G2RH-2958-XXXC
Bulletin has no description...
MINI-F8FM-8WH6-P569
Bulletin has no description...
MINI-QFMJ-F446-46F2
Bulletin has no description...