Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

119113 matches found

Vulnrichment
Vulnrichment•added 2026/10/13 4:13 p.m.•12 views

CVE-2026-102989 TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an...

9.3CVSS5.9AI score0.00544EPSS
SaveExploits0References4
osv_suse
osv_suse•added 2026/10/13 3:22 p.m.•22 views

SUSE-SU-2026:24239-1 Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.9 bsc1255111: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. -...

9.8CVSS6AI score0.00866EPSS
SaveExploits0References28
osv_opensuse
osv_opensuse•added 2026/10/13 3:18 p.m.•24 views

OPENSUSE-SU-2026:22095-1 Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.9 bsc1255111: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. -...

9.8CVSS5.8AI score0.00866EPSS
SaveExploits0References27
SUSE Linux
SUSE Linux•added 2026/10/13 3:18 p.m.•6 views

Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.9 bsc1255111: CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. CVE-2026-78659:...

8.7CVSS7.2AI score0.00866EPSS
SaveExploits0References54
NVD
NVD•added 2026/10/13 2:17 p.m.•18 views

CVE-2026-109960

Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting a malicious theme value via customerindex.php. Script executes when an administrator views the customer overview with the Theme column...

8.7CVSS0.00292EPSS
SaveExploits0References2
osv_cve
osv_cve•added 2026/10/13 1:27 p.m.•22 views

CVE-2026-109960 Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value

Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting a malicious theme value via customerindex.php. Script executes when an administrator views the customer overview with the Theme column...

8.7CVSS5.6AI score0.00292EPSS
SaveExploits0References4
CVE
CVE•added 2026/10/13 1:27 p.m.•30 views

CVE-2026-109960

Froxlor versions 2.0.0 before 2.3.14 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw. Authenticated customers can inject malicious HTML and JavaScript by providing a craftied theme value via customer_index.php . The payload executes in an administrator's browser when they view the cust...

8.7CVSS5.6AI score0.00292EPSS
SaveExploits0References2
NVD
NVD•added 2026/10/13 1:17 p.m.•14 views

CVE-2026-109780

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

9.8CVSS0.00363EPSS
SaveExploits0References3
osv_debian
osv_debian•added 2026/10/13 1:17 p.m.•23 views

DEBIAN-CVE-2026-109725

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

5.4CVSS6.2AI score0.00228EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/13 1:17 p.m.•20 views

CVE-2026-109725

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

5.4CVSS0.00228EPSS
SaveExploits0References6
NVD
NVD•added 2026/10/13 1:17 p.m.•18 views

CVE-2026-109724

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

5.4CVSS0.00217EPSS
SaveExploits0References5
osv_debian
osv_debian•added 2026/10/13 1:17 p.m.•24 views

DEBIAN-CVE-2026-109724

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

5.4CVSS6.2AI score0.00217EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2026/10/13 1:17 p.m.•10 views

UBUNTU-CVE-2026-109780

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

9.8CVSS6AI score0.00363EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve•added 2026/10/13 1:17 p.m.•16 views

CVE-2026-109724

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

6.1AI score0.00217EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve•added 2026/10/13 1:17 p.m.•11 views

CVE-2026-109780

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

9.8CVSS6AI score0.00363EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu•added 2026/10/13 1:17 p.m.•10 views

UBUNTU-CVE-2026-109724

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

5.4CVSS6.2AI score0.00217EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu•added 2026/10/13 1:17 p.m.•10 views

UBUNTU-CVE-2026-109725

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

5.4CVSS6.2AI score0.00228EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve•added 2026/10/13 1:17 p.m.•14 views

CVE-2026-109725

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

6.2AI score0.00228EPSS
SaveExploits0References7
EUVD
EUVD•added 2026/10/13 12:29 p.m.•15 views

EUVD-2026-98540

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

6AI score0.00363EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/10/13 12:29 p.m.•8 views

CVE-2026-109780 Mitigation bypass in the DOM: Core & HTML component

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

6AI score0.00363EPSS
SaveExploits0References3
Rows per page
Query Builder