3549 matches found
CVE-2025-11210: Improper Protection of Physical Side Channels
Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
ROS-20251106-07
A vulnerability in the phpMyAdmin database administration web application is related to an XSS vulnerability in the table validation function. XSS vulnerability for the table validation feature. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code ...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990630)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990630 advisory. In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989872)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989872 advisory. In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990229)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990229 advisory. In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion...
CVE-2025-62060
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...
RT -- CSV injection
Gareth Watkin-Jones from 4armed reports: RT is vulnerable to CSV injection via ticket values with special characters that are exported to a TSV from search results. Thanks to Gareth Watkin-Jones from 4armed for reporting this finding...
EUVD-2025-35374
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...
CVE-2025-62060
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...
CVE-2025-62060 WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...
CVE-2025-62060 WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...
CVE-2025-62060
CVE-2025-62060: WordPress Tab Ultimate (tabs-pro) contains an XSS vulnerability due to improper input handling in Tab Ultimate <= 1.8. Impact is Cross‑Site Scripting; CVSS 3.1 base score 6.5 (Medium). A patched fix is available in Tab Ultimate
PT-2025-45645
Name of the Vulnerable Software and Affected Versions Request Tracker versions prior to 4.4.4+dfsg-2+deb11u5 Request Tracker versions prior to 4.4.6+dfsg-1.1+deb12u3 Request Tracker versions prior to 5.0.3+dfsg-3deb12u4 Request Tracker versions prior to 5.0.7+dfsg-4+deb13u1 Description Request...
WordPress plugin Tab Ultimate has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-43354
Name of the Vulnerable Software and Affected Versions Themepoints Tab Ultimate versions through 1.8 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially allowing for Cross-site Scripting XSS. This could allow an attacker ...
CVE-2025-62060: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through = 1.8...
Tab Component Microsoft Edge Google Chrome Unauthorized Access
The vulnerability of the Tab component in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2025-62585
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment...