Lucene search
+L

873 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/31 2:29 p.m.•8 views

CLEANSTART-2024-SL56993 Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers

Security vulnerability affects the librewolf package. Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers...

6.5CVSS6.3AI score0.0046EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/31 5:33 a.m.•5 views

CVE-2026-109234 Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent bbPress reply body' parameter in all versions up to, and including, 5.6.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

7.2CVSS6.2AI score0.00383EPSS
SaveExploits0References8
CVE
CVE
•added 2026/10/31 5:33 a.m.•21 views

CVE-2026-109234

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 5.6.4 . The root cause is insufficient input sanitization and output escaping of the post_content (bbPress reply body) parameter. An unauthenticated attacker can inject arbitr...

7.2CVSS6.2AI score0.00383EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/31 5:33 a.m.•39 views

CVE-2026-109234 Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postcontent bbPress reply body' parameter in all versions up to, and including, 5.6.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

7.2CVSS0.00383EPSS
SaveExploits0References8
Kitploit
Kitploit
•added 2026/10/30 9:46 p.m.•33 views

VUL4J-59

jsoup: Java HTML parser that makes sense of real-world HTML soup. jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification...

5.9AI score
SaveExploits0
osv_cleanstart
osv_cleanstart
•added 2026/10/30 7:15 p.m.•6 views

CLEANSTART-2024-RH40188 Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers

Security vulnerability affects the firefox package. Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers...

6.5CVSS6.3AI score0.0046EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/29 4:22 p.m.•8 views

CVE-2026-117920

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

9.6CVSS6.7AI score0.00181EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/10/29 4:06 p.m.•9 views

CVE-2026-117883

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

8.8CVSS6.3AI score0.00187EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/10/28 2:16 a.m.•9 views

CVE-2026-117920

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

9.6CVSS6AI score0.00181EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/10/28 2:16 a.m.•8 views

CVE-2026-117883

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

8.8CVSS6.1AI score0.00187EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/28 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-117883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

8.8CVSS6.1AI score0.00187EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/28 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-117920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

9.6CVSS6AI score0.00181EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/10/27 5:33 p.m.•13 views

SUSE CVE-2026-117883

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

8.8CVSS6.1AI score0.00187EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/10/27 5:31 p.m.•13 views

SUSE CVE-2026-117920

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

9.6CVSS6AI score0.00181EPSS
SaveExploits0References5
NVD
NVD
•added 2026/10/27 2:16 p.m.•8 views

CVE-2026-117920

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

9.6CVSS0.00181EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/10/27 2:16 p.m.•13 views

DEBIAN-CVE-2026-117920

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

9.6CVSS6AI score0.00181EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/27 2:16 p.m.•12 views

DEBIAN-CVE-2026-117883

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

8.8CVSS6.1AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/27 2:16 p.m.•7 views

CVE-2026-117883

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

8.8CVSS0.00187EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/10/27 2:16 p.m.•7 views

CVE-2026-117883

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

6AI score0.00187EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/10/27 2:16 p.m.•8 views

CVE-2026-117920

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

6AI score0.00181EPSS
SaveExploits0References9
Rows per page
Query Builder