845 matches found
PT-2026-118938
Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
Google Chrome Vulnerability: CVE-2026-113241
Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106159
In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonGroup button URLs are concatenated into an unquoted href attribute after URL sanitization. An attacker who can control a button URL can supply an otherwise allowed HTTPS URL containing...
EUVD-2026-102083
In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonGroup button URLs are concatenated into an unquoted href attribute after URL sanitization. An attacker who can control a button URL can supply an otherwise allowed HTTPS URL containing...
CVE-2026-106159
Progress Kendo UI for jQuery versions from 2022.3.1109 up to (but not including) 2026.3.1015 are vulnerable to a Cross-Site Scripting (XSS) flaw in the ToolBar ButtonGroup component. The root cause is the concatenation of button URLs into an unquoted href attribute following URL sanitization. An ...
CVE-2026-106159 Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery
In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonGroup button URLs are concatenated into an unquoted href attribute after URL sanitization. An attacker who can control a button URL can supply an otherwise allowed HTTPS URL containing...
CVE-2026-106159: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonGroup button URLs are concatenated into an unquoted href attribute after URL sanitization. An attacker who can control a button URL can supply an otherwise allowed HTTPS URL containing...
BIT-JOOMLA-2026-92224 Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...
django-canary-endpoint (0.1.2), django-debug-toolbar (>=0.10.0, <=0.10.2) potentially affected by CVE-2026-15307 via django (1.5.12)
django PYPI version 1.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-canary-endpoint 0.1.2 - django-debug-toolbar =0.10.0, =0.10.2 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...
CLEANSTART-2024-WY60259 Use after free in Cast UI and Toolbar in Google Chrome prior to 103
Security vulnerability affects the chromium package. Use after free in Cast UI and Toolbar in Google Chrome prior to 103...
CVE-2026-92224
Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...
CVE-2026-92224
Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...
CVE-2026-92224
Joomla! Core versions 4.0.0-5.4.8 and 6.0.0-6.1.3 are vulnerable to a Cross-Site Scripting (XSS) flaw in the link toolbar layout . The root cause is the failure to properly escape inputs, which creates an XSS vector. This vulnerability has a HIGH base severity (CVSS 4.0 score of 8.4 ). No specifi...
CVE-2026-92224
Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...
CVE-2026-92224 Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...
CVE-2026-92224 Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...
EUVD-2026-89086
Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...
CVE-2026-92224: Improper Neutralization of Input During Web Page Generation
Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...
PT-2026-102697
Name of the Vulnerable Software and Affected Versions Joomla! Core versions 4.0.0 through 5.4.8 Joomla! Core versions 6.0.0 through 6.1.3 Description The link toolbar layout fails to properly escape inputs, creating a Cross-Site Scripting XSS vector. XSS is a flaw that allows an attacker to injec...
