27 matches found
ROS-20260915-73-0118
The vulnerability of the History component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...
ROS-20260910-73-0139
The vulnerability of the History component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
The vulnerability of the History component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.
The vulnerability of the History component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
The vulnerability of the History component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.
The vulnerability of the History component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...
CVE-2026-13966
An inappropriate implementation flaw was found in the History component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513741393...
Chromium: CVE-2026-13966 Inappropriate implementation in History
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-11309
An insufficient policy enforcement flaw was found in the History component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506392934...
Chromium: CVE-2026-11309 Insufficient policy enforcement in History
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
BIT-JOOMLA-2026-30894 Joomla! Core - [20260503] - XSS in com_contenthistory
Lack of output escaping leads to a XSS vector in the content history component...
CVE-2026-30894
Lack of output escaping leads to a XSS vector in the content history component...
CVE-2026-30894
Lack of output escaping leads to a XSS vector in the content history component...
EUVD-2026-31872
Lack of output escaping leads to a XSS vector in the content history component...
CVE-2026-30894
CVE-2026-30894 affects Joomla! Core – com_contenthistory. The issue arises from lack of output escaping in the content history component, enabling a XSS vector. CVSS4.0 metrics indicate: Network attack vector, Low attack complexity, High privileges required, Passive user interaction; base score 6...
CVE-2026-30894 Joomla! Core - [20260503] - XSS in com_contenthistory
Lack of output escaping leads to a XSS vector in the content history component...
Joomla! CMS 跨站脚本漏洞
Joomla! CMS is a content management system developed under the open source Joomla! framework. Joomla! CMS has a cross-site scripting vulnerability, which stems from the lack of output escaping. This vulnerability may lead to cross-site scripting attacks within the content history component of the...
CVE-2025-0581 CampCodes School Management Software Chat History send cross site scripting
A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. This affects an unknown part of the file /chat/group/send of the component Chat History. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the...
Mozilla: Use-after-free in nsSHistory
The Mozilla Foundation Security Advisory describes this flaw as: Session history navigations may have led to a use-after-free and potentially exploitable crash...
The vulnerability of the History API component in the Cisco SD-WAN vManage network management system allows a attacker to disclose protected information.
The vulnerability of the History API component in the Cisco SD-WAN vManage network management system is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
PT-2021-7904 · Aom +4 · Aom +4
Name of the Vulnerable Software and Affected Versions: AOM version 2.0.1 Description: The issue is related to a NULL pointer dereference via the rate hist.c component. This can potentially allow a remote attacker to cause a denial of service. Recommendations: For AOM version 2.0.1, at the moment,...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. A heap buffer overflow in the History component allows an attacker to execute arbitrary code on the host OS...