99626 matches found
The vulnerability of the FoldableAPIs component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.
The vulnerability of the FoldableAPIs component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to access confidential data through a specially created HTML page...
The vulnerability of the Payments component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.
The vulnerability of the Payments component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created HTML page...
The vulnerability of the Permissions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to gain access to confidential data.
The vulnerability of the Permissions component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML...
The vulnerability of the Storage Access API component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.
The vulnerability of the Storage Access API in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the File Input component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-59281
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument...
Linux Distros Unpatched Vulnerability : CVE-2026-19873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a...
CVE-2026-51153
CVE-2026-51153 is a stored XSS in QD (versions 20220208 through 20250803) affecting the TaskRunHandler.post() handler in web/handlers/task.py. The root cause is that task log content (logtmp) is rendered into the HTML response using Python % string formatting without HTML encoding . A low-privile...
CVE-2026-51153
Stored Cross-Site Scripting XSS in TaskRunHandler.post in web/handlers/task.py in QD 20220208 through 20250803. When a task is run via /task//run, the handler renders task log content logtmp into the HTML response using Python % string formatting without HTML encoding. logtmp is populated from th...
PT-2026-83785
Name of the Vulnerable Software and Affected Versions Aix-DB versions 1.0 through 1.2.4 Description The software renders markdown with raw HTML enabled into v-html bindings without proper sanitization, leading to stored cross-site scripting. This allows attackers to inject malicious HTML and...
The vulnerability of the Ozone component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Ozone component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Blink component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...