28464 matches found
EUVD-2025-203124
Vuetify has a Cross-site Scripting XSS vulnerability in the VDatePicker component...
GHSA-9W3X-85MW-4FWM Vuetify has a Cross-site Scripting (XSS) vulnerability in the VDatePicker component
Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...
CVE-2025-40345
creationtimestamp| type| source ---|---|--- 2025-12-12 19:54:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sukqmxzn2q 2026-01-21 22:46:10+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mcxqsbv2c225 2026-03-19 00:00:00+00:00| seen|...
Cross-site Scripting (XSS)
Overview org.webjars.npm:vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the title-date-format property in the VDatePicker component. An attacker can execute arbitrary scripts in the context of the...
Cross-site Scripting (XSS)
Overview vuetify is an a Material Design component framework for Vue.js. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the title-date-format property in the VDatePicker component. An attacker can execute arbitrary scripts in the context of the user's browser by...
CVE-2025-14570
creationtimestamp| type| source ---|---|--- 2025-12-12 19:41:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sttfqfp32m...
CVE-2025-65530
creationtimestamp| type| source ---|---|--- 2025-12-12 19:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7std6b6aw2r 2026-01-07 00:07:35+00:00| seen| https://gist.github.com/aleksejspopovs/a5f757871c6bd16fab471e5cdd231061 2026-01-09 12:34:22+00:00| seen|...
CVE-2025-67818
creationtimestamp| type| source ---|---|--- 2025-12-12 19:27:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7st2khr5p2c...
CVE-2025-8082
Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...
CVE-2025-8082 Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'
Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...
CVE-2025-8082
Vuetify CVE-2025-8082 affects the VDatePicker component where the title-date-format property can output user-generated content which is assigned to innerHTML without sanitization, enabling Cross-Site Scripting. Affected versions are Vuetify 2.0.0 and above up to, but not including, 3.0.0. The iss...
CVE-2025-8082 Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'
Improper neutralization of the title date in the 'VDatePicker' component in Vuetify, allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the 'title-date-format'...
CLSA-2025-1764769161 libsoup: Fix of 2 CVEs
CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic...
CVE-2025-12407
creationtimestamp| type| source ---|---|--- 2025-12-12 13:14:02+00:00| seen| https://gist.github.com/Darkcrai86/d5a1bfb13f4ef3579e5d65ee532a1af7 2025-12-12 15:30:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7sfsneovt2x...
CVE-2025-11266
creationtimestamp| type| source ---|---|--- 2025-12-12 12:57:03+00:00| seen| https://infosec.exchange/users/morgenm/statuses/115706706172988875...
[SECURITY] [DLA 4403-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-4403-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 12, 2025 https://wiki.debian.org/LTS -...
CVE-2025-12883
creationtimestamp| type| source ---|---|--- 2025-12-12 08:29:24+00:00| seen| https://gist.github.com/Darkcrai86/ffe3dd244dded819c0961f79966856b8...
CVE-2025-14354
creationtimestamp| type| source ---|---|--- 2025-12-12 08:24:38+00:00| seen| https://gist.github.com/Darkcrai86/619265f864587e9b916f49ea137e97bc...