Lucene search
+L

99609 matches found

Cvelist
Cvelist
added 2026/09/01 12:18 p.m.46 views

CVE-2026-84124 Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

0.0017EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2026/09/01 12:18 p.m.9 views

CVE-2026-84124

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

5.4CVSS5.9AI score0.0017EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/01 12:18 p.m.33 views

CVE-2026-84124

CVE-2026-84124 is a use-after-free vulnerability in the DOM: Core & HTML component of Mozilla Firefox . The CVSS 3.1 score is 5.4 (MEDIUM) , with a network-based attack vector requiring user interaction and no privileges , resulting in low impacts to confidentiality and integrity but no impact to...

5.4CVSS5.8AI score0.0017EPSS
SaveExploits0References7Affected Software2
NVD
NVD
added 2026/09/01 12:17 p.m.11 views

CVE-2026-84188

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any authenticated user who views the affected graph type. The issue is fixed in...

4.8CVSS0.0018EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/01 11:33 a.m.9 views

EUVD-2026-69025

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any authenticated user who views the affected graph type. The issue is fixed in...

4.8CVSS5.8AI score0.0018EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 11:33 a.m.13 views

CVE-2026-84188

LibreNMS versions ≤ 26.4.0 contain a stored cross-site scripting vulnerability in the graph_descr. configuration settings. The value is echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php, allowing an authenticated administrator to store a malicious HTML payload that execu...

4.8CVSS5.8AI score0.0018EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:33 a.m.37 views

CVE-2026-84188 librenms before 26.7.0 Stored XSS via graph_descr settings

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any authenticated user who views the affected graph type. The issue is fixed in...

4.8CVSS0.0018EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/01 11:33 a.m.11 views

CVE-2026-84188 librenms before 26.7.0 Stored XSS via graph_descr settings

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any authenticated user who views the affected graph type. The issue is fixed in...

4.8CVSS5.8AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/01 5:43 a.m.21 views

Important: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS6AI score0.00568EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/01 5:43 a.m.19 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS6AI score0.0031EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.22 views

PT-2026-84509

Name of the Vulnerable Software and Affected Versions sanitize-html versions 1.9.0 through 2.17.6 Description In configurations that allow animate, animateColor, animateMotion, animateTransform, or set elements, the packages/sanitize-html/index.js file fails to correctly validate the values...

5.4CVSS5.9AI score0.00185EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.11 views

PT-2026-84551

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A UI misrepresentation issue in FullScreen mode allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome on Androi...

9.8CVSS8AI score0.01462EPSS
SaveExploits6References46
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.11 views

PT-2026-84553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Incorrect authorization in SiteSettings allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to version...

9.8CVSS5.8AI score0.00321EPSS
SaveExploits1References48
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.7 views

PT-2026-84177

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird ESR versions prior to 140.15 Thunderbird ESR versions prior to 153.2 Description A...

10CVSS5.9AI score0.00534EPSS
SaveExploits3References183
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.12 views

PT-2026-84554

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A use after free issue exists in Dawn, which is a WebGPU implementation. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user...

9.8CVSS8.6AI score0.01462EPSS
SaveExploits6References46
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.14 views

PT-2026-84566

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A UI misrepresentation issue in FullScreen mode allows a remote attacker to spoof the address bar by using a specially crafted HTML page. Recommendations Update Google Chrome to version...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits0References48
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-84125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

5.4CVSS5.9AI score0.00164EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.12 views

RHEL 8 : wget (RHSA-2026:62144)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:62144 advisory. The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: GNU Wget: Memory...

8.7CVSS6.6AI score0.00351EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.12 views

PT-2026-84190

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A spoofing issue exists within the DOM: Core & HTML component. Recommendations Update Firefox t...

10CVSS5.1AI score0.00534EPSS
SaveExploits4References175
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.13 views

PT-2026-84547

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description An uninitialized resource in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page...

9.8CVSS6.7AI score0.00319EPSS
SaveExploits0References49
Rows per page
Query Builder