4 matches found
CVE-2026-56722
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a target file path inside an SVG image delivered through a data: URI, because dompdf processes the SVG twice and the second pass does not...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 146.0.7680.178 contained a security vulnerability. This vulnerability stemmed from the reuse of Dawn components after their release, which could allow remote attackers to execute arbitrary code through a...
CVE-2026-23738
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using aststrappend. The...
Description of an update for MSXML Core Services 6.0 Service Pack 2
Description of an update for MSXML Core Services 6.0 Service Pack 2 Applies To Windows 7 Windows Server 2008 Windows Vista Microsoft Windows Server 2003 Windows XP Symptoms When you visit a Web site or run an application that loads XHTML documents by using Microsoft XML Core Services MSXML, MSXML...