46534 matches found
EUVD-2026-57417
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session...
CVE-2026-19657 ScadaLTS Unauthenticated Reflected XSS
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session...
EUVD-2026-57327
Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Unencoded JSON string values reflected from stored fields are inserted into the DOM without sanitization, allowing attackers to run arbitrary JavaScript in the victim's browse...
CVE-2026-19560
A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the Blink component by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the sandbox environment, potentially compromising the affected...
CVE-2026-19151
A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to further system compromis...
RHSA-2026:54185 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2026:54182 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2026:54180 Red Hat Security Advisory: firefox security update
Bulletin has no description...
CVE-2026-19558
A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user is convinced to install a specially crafted malicious extension...
CVE-2026-19556
A flaw was found in chromium-browser. This use-after-free vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to a compromise of the affected system...
GHSA-RX36-FM6W-X79J vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19147 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19142 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-25G9-FMC9-9M6P vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19177 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19175 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19162 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QQJW-V6CG-96J4 vulnerabilities
Vulnerabilities for packages: chromium...