Lucene search
+L

6290 matches found

Kaspersky
Kaspersky
added 2026/03/31 12:00 a.m.40 views

KLA90963 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in CSS can be exploited to cause denial of service or execute...

9.6CVSS6.5AI score0.04938EPSS
SaveExploits0References4
Debian
Debian
added 2026/03/30 3:09 p.m.11 views

[SECURITY] [DLA 4517-1] roundcube security update

Debian LTS Advisory DLA-4517-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 30, 2026 https://wiki.debian.org/LTS Package : roundcube Version : 1.4.15+dfsg.1-1+deb11u8 CVE ID : not yet available Debian Bug : 1131182 1132268 Multiple vulnerabilities were...

5.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/03/30 12:00 a.m.10 views

The vulnerability of the Google Chrome browser’s CSS component, which allows a hacker to trigger a service failure

The vulnerability of the Google Chrome browser’s CSS component relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

10CVSS7.1AI score0.00454EPSS
SaveExploits0References6Affected Software3
Tenable Nessus
Tenable Nessus
added 2026/03/29 12:00 a.m.8 views

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:20427-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20427-1 advisory. Changes in chromium: - Chromium 146.0.7680.164 boo1260376 CVE-2026-4673: Heap buffer overflow in WebAudio CVE-2026-4674: Out of bounds read in C...

8.8CVSS7.6AI score0.00504EPSS
SaveExploits0References17
Microsoft CVE
Microsoft CVE
added 2026/03/28 1:02 a.m.11 views

Chromium: CVE-2026-4442 Heap buffer overflow in CSS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS5.8AI score0.00271EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/03/27 6:06 p.m.19 views

n8n has XSS in Chat Trigger Node through Custom CSS

Impact An authenticated user with permission to create or modify workflows could inject malicious JavaScript into the Custom CSS field of the Chat Trigger node. Due to a misconfiguration in the sanitize-html library, the sanitization could be bypassed, resulting in stored XSS on the public chat...

5.8AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/03/27 6:06 p.m.9 views

GHSA-3C7F-5HGJ-H279 n8n has XSS in Chat Trigger Node through Custom CSS

Impact An authenticated user with permission to create or modify workflows could inject malicious JavaScript into the Custom CSS field of the Chat Trigger node. Due to a misconfiguration in the sanitize-html library, the sanitization could be bypassed, resulting in stored XSS on the public chat...

5.4CVSS5.8AI score0.0025EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/27 6:06 p.m.17 views

Cross-site Scripting (XSS)

Overview @n8n/n8n-nodes-langchain is a Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Custom CSS field in the Chat Trigger node due to improper sanitization in the sanitize-html library. An authenticated user with permission to create or modify workflows and...

5.4CVSS5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/03/27 11:10 a.m.11 views

OESA-2026-1706 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.CVE-2025-59375 Race...

10CVSS6.6AI score0.01315EPSS
SaveExploits2References39
OSV
OSV
added 2026/03/27 11:10 a.m.12 views

OESA-2026-1707 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.CVE-2025-59375 Race...

10CVSS6.6AI score0.01315EPSS
SaveExploits2References39
OSV
OSV
added 2026/03/27 11:10 a.m.11 views

OESA-2026-1708 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.CVE-2025-59375 Race...

10CVSS6.1AI score0.01315EPSS
SaveExploits2References39
OSV
OSV
added 2026/03/27 11:10 a.m.11 views

OESA-2026-1705 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.CVE-2025-59375 Race...

10CVSS6.6AI score0.01315EPSS
SaveExploits2References39
OSV
OSV
added 2026/03/27 11:10 a.m.10 views

OESA-2026-1709 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.CVE-2025-59375 Race...

10CVSS6.6AI score0.01315EPSS
SaveExploits2References39
Positive Technologies
Positive Technologies
added 2026/03/27 12:00 a.m.16 views

PT-2026-51782

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.25 n8n versions prior to 2.11.2 Description An authenticated user with permissions to create or modify workflows can exploit a flaw in the CSS sanitization of the Form Trigger node to store a cross-site scripting XS...

5.4CVSS5.7AI score0.00243EPSS
SaveExploits0References8
Kaspersky
Kaspersky
added 2026/03/27 12:00 a.m.19 views

KLA90953 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in CSS can be exploited ...

8.8CVSS8.1AI score0.00504EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
added 2026/03/26 3:18 p.m.17 views

CVE-2026-3846

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 148.0.2...

6.5CVSS5.8AI score0.00112EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:18 p.m.11 views

CVE-2026-30977

RenderBlocking is a MediaWiki extension that allows interface administrators to specify render-blocking CSS and JavaScript. Prior to 0.1.1, there is Stored XSS in renderblocking-css with Inline Assets mode. $wgRenderBlockingInlineAssets = true and editsitecss user rights are required. This...

2CVSS5.8AI score0.00472EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.10 views

CVE-2026-31873

Unhead is a document head and template manager. Prior to 2.1.11, The link.href check in makeTagSafe safe.ts uses String.includes, which is case-sensitive. Browsers treat URI schemes case-insensitively. DATA:text/css,... is the same as data:text/css,... to the browser, but 'DATA:...'.includes'data...

6.1CVSS6AI score0.00237EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/03/26 11:37 a.m.8 views

firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component...

9.8CVSS7.2AI score0.00483EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/03/26 11:25 a.m.6 views

firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component...

9.8CVSS7.2AI score0.00483EPSS
SaveExploits0References6
Rows per page
Query Builder