5126 matches found
CVE-2025-55618
In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...
CVE-2025-55618
CVE-2025-55618 describes an HTML injection in Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d where an attacker can inject payloads into the profile name field that are rendered by the app. The NVD entry lists CVSSv3.1: 7.3 (High) with network attack vector, no privileges required, and no use...
PT-2025-34936 · Hyundai · Hyundai Navigation App
Name of the Vulnerable Software and Affected Versions: Hyundai Navigation App version STD5W.EUR.HMC.230516.afa908d Description: An attacker can inject HTML payloads into the profile name field within the navigation application, leading to the rendering of the injected content. Recommendations:...
Linux Distros Unpatched Vulnerability : CVE-2018-18247
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter. CVE-2018-18247 Note that Nessus relies on the presence of the package as...
Introducing the Qualys App Picker: Easier, Faster Navigation for All Your Security Applications
Navigating your cybersecurity platform should be easy. That is why we have reimagined the way users access Qualys applications with the brand-new Qualys App Picker , a streamlined, intuitive navigation panel designed to make access faster, easier, and smarter in the Qualys Enterprise TruRisk...
Linux Distros Unpatched Vulnerability : CVE-2018-18250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item...
Linux Distros Unpatched Vulnerability : CVE-2016-6615
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding feature a specially-crafted database name can be used to trigg...
Linux Distros Unpatched Vulnerability : CVE-2018-16086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extensi...
Linux Distros Unpatched Vulnerability : CVE-2018-6112
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation...
Linux Distros Unpatched Vulnerability : CVE-2018-16087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HT...
Linux Distros Unpatched Vulnerability : CVE-2018-17468
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs...
Linux Distros Unpatched Vulnerability : CVE-2017-5096
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to...
Linux Distros Unpatched Vulnerability : CVE-2018-6138
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extensi...
Malicious code in react-native-performance-navigation-bottom-tabs (npm)
The package react-native-performance-navigation-bottom-tabs was found to contain malicious code...
Malicious code in react-native-performance-navigation (npm)
The package react-native-performance-navigation was found to contain malicious code...
Malicious code in logrocket-navigation (npm)
The package logrocket-navigation was found to contain malicious code...
Malicious code in fcn-gin-navigation (npm)
The package fcn-gin-navigation was found to contain malicious code...
Malicious code in react-native-performance-navigation-drawer (npm)
The package react-native-performance-navigation-drawer was found to contain malicious code...
