Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:36 p.m.•22 views

CVE-2026-41469

Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript resources from attacker-controlled origins. When chained with the template injection and sandbox escape vulnerabilities present in the same application, the absence of CSP...

5.2CVSS5.7AI score0.00318EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/22 6:04 p.m.•11 views

CVE-2026-41468

Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives. When combined with template injection present in the same application, these primitives allow attackers to escape the AngularJS sandbox and achieve arbitrary JavaScript executi...

9.3CVSS6.1AI score0.0065EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/22 6:04 p.m.•10 views

CVE-2026-41469 Beghelli Sicuro24 SicuroWeb Missing Content Security Policy

Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript resources from attacker-controlled origins. When chained with the template injection and sandbox escape vulnerabilities present in the same application, the absence of CSP...

5.2CVSS6.2AI score0.00318EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/22 12:00 a.m.•23 views

Beghelli Sicuro24 SicuroWeb 安全漏洞

Beghelli Sicuro24 SicuroWeb is a remote security monitoring and alarm management platform provided by the Italian company Beghelli. There are security vulnerabilities in Beghelli Sicuro24 SicuroWeb. These vulnerabilities stem from the inclusion of AngularJS 1.5.2, which contains known sandbox...

9.3CVSS6.1AI score0.0065EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/22 12:00 a.m.•3 views

CVE-2026-41469: Protection Mechanism Failure

Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript resources from attacker-controlled origins. When chained with the template injection and sandbox escape vulnerabilities present in the same application, the absence of CSP...

5.2CVSS8.4AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/22 12:00 a.m.•1 views

CVE-2026-41468: Use of Unmaintained Third Party Components

Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives. When combined with template injection present in the same application, these primitives allow attackers to escape the AngularJS sandbox and achieve arbitrary JavaScript executi...

9.3CVSS8.4AI score0.0065EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/22 12:00 a.m.•23 views

Beghelli Sicuro24 SicuroWeb 安全漏洞

Beghelli Sicuro24 SicuroWeb is a remote security monitoring and alarm management platform developed by the Italian company Beghelli. There are security vulnerabilities in Beghelli Sicuro24 SicuroWeb. These vulnerabilities stem from the failure to enforce content security policies. The platform...

5.2CVSS5.9AI score0.00318EPSS
SaveExploits0References1
Rows per page
Query Builder