Lucene search
K

56 matches found

CNNVD
CNNVD
added 2026/03/11 12:0 a.m.2 views

A cubism panel for Grafana 跨站脚本漏洞

The "Cubism Panel for Grafana" is a visualization plugin developed by ekacnet’s individual developers. Versions of the cubism panel for Grafana prior to 0.1.2 contain a cross-site scripting vulnerability. This vulnerability arises from the panel’s zooming link processor not verifying URL schemes...

7.6CVSS6AI score0.00016EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/28 9:47 p.m.3 views

CVE-2026-28558 wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the...

6.4CVSS5.8AI score0.00038EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/08/06 12:0 a.m.2 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

10CVSS7.5AI score0.00324EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/05/06 12:0 a.m.1 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially crafted...

10CVSS8.3AI score0.02469EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/11 12:0 a.m.1 views

The vulnerability of JavaScript script handlers in Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome browsers is related to buffer overflow in the “cull” mechanism. Exploiting this vulnerability allows a malicious actor to partially compromise the confidentiality, integrity, and accessibility of the protected information through a...

7.5CVSS7.8AI score0.00637EPSS
Exploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:0 a.m.1 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially crafted HTML page...

7.5CVSS7.2AI score0.00049EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.1 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the execution of operations beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

10CVSS0.02213EPSS
Exploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

10CVSS0.01063EPSS
Exploits2References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

10CVSS0.00222EPSS
Exploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

10CVSS0.15009EPSS
Exploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to memory-related write operations. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS0.00254EPSS
Exploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside of the buffer in memory, resulting from improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious act...

10CVSS0.00204EPSS
Exploits1References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/09/17 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to corrupt dynamic memory.

Vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers. Exploiting this vulnerability can allow a remote attacker to corrupt dynamic memory through a specially crafted HTML page...

10CVSS0.22799EPSS
Exploits2References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted HTML page...

10CVSS0.00243EPSS
Exploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.1 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain full control over the application.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application through a specially...

3.1CVSS0.00603EPSS
Exploits1References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/06/28 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources using incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a created HTML page...

10CVSS0.00658EPSS
Exploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/06/21 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to expose sensitive information through a specially created HTML page...

7.8CVSS0.00311EPSS
Exploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/06/21 12:0 a.m.0 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially created HTML page...

10CVSS0.00248EPSS
Exploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/05/06 12:0 a.m.1 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed during the processing of objects in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

10CVSS0.00337EPSS
Exploits1References19Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/04/26 12:0 a.m.1 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page or file...

10CVSS0.04728EPSS
Exploits1References17Affected Software7
Rows per page
Query Builder