119029 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-118244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML whe...
PT-2026-133660
RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link's address can add a script that runs when the ticket history is displayed, with no further action by the viewer. Anyone who can add HTML content ...
PT-2026-134198
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized...
PT-2026-134195
Summary Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phoenixframework phoenix html allows an attacker who controls attribute names to inject attributes and script into rendered HTML via Phoenix.HTML.attributes escape/1. attributes escape/1 in...
ANGLE library DoS
The ANGLE library vulnerability in Google Chrome and Microsoft Edge is related to out-of-bounds buffer writes. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted HTML page...
PT-2026-133603
Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1, multiple eval calls in the vendored PEAR HTML QuickForm libraries can execute arbitrary PHP code if form element names contain attacker-influenced data. Standard Chamilo forms...
CVE-2026-117182
An authenticated cross-site scripting XSS vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted URL...
PT-2026-133286
The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecting them into HTML attributes in a publicly reachable AJAX response, leading to Reflected Cross-Site Scripting. The affected action is gated by an anonymous nonce that only...
CVE-2026-119261: Google Chrome: Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…
Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-117182
Spina CMS v2.21.0 is vulnerable to Stored Cross-Site Scripting (XSS) due to a bypass in the Spina::SafeUrlValidator. While the validator correctly blocks malicious URLs during the admin embed form submission, it is not triggered when rich text content is saved via the page edit form (Spina::Parts...
CVE-2026-119343: Stirling-Tools Stirling-PDF: Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized...
CVE-2026-62990: shopperlabs shopper: Shopper is a Headless e-commerce Admin Panel
Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1 and beta.2, authenticated back-office staff with a content-upload permission can store executable media on the administrator's own origin. In the 2.x implementation, relevant...
PT-2026-133623
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
CVE-2025-68395: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS
ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged attacker can inject arbitrary HTML and JS into notes, which will be rendered/executed when a user visits this module. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF...
PT-2026-133646
PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser. fetch single url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or we...
PT-2026-134445
Name of the Vulnerable Software and Affected Versions Webmention plugin for WordPress versions prior to 5.10.2 Description Stored Cross-Site Scripting occurs via the Open Graph og:title meta tag of a webmention source URL. The issue stems from insufficient input sanitization where Meta::add...
ANGLE library DoS
The ANGLE library vulnerability in Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Network service Sandbox Bypass
The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability enables a remote attacker to bypass sandbox security mechanisms by using a specially crafted HTML page...
Network Service Google Chrome Microsoft Edge Access Information Disclosure
The vulnerability in the Network services of Google Chrome and Microsoft Edge is related to insufficient protection of sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Network Service Google Chrome Microsoft Edge Access Information Disclosure
The vulnerability in the Network service of Google Chrome and Microsoft Edge stems from insufficient validation of the state of shared resources. Exploitation of this vulnerability may enable a remote attacker to gain access to protected information via a specially crafted HTML page...