Lucene search
+L

11612 matches found

NVD
NVD
added 2026/09/15 4:17 p.m.6 views

CVE-2026-91942

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers can craft malicious PDFs with event-handler markup to execute JavaScript in the Playground origin and steal API tokens fro...

5.4CVSS0.00223EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/15 4:17 p.m.5 views

CVE-2026-91944

crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like th...

6.1CVSS0.00247EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/15 3:18 p.m.6 views

EUVD-2026-78801

crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like th...

6.1CVSS5.5AI score0.00247EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/15 3:18 p.m.26 views

CVE-2026-91944 crawl4ai before 0.9.3 DOM-based XSS via Playground UI

crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like th...

6.1CVSS0.00247EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/15 3:18 p.m.6 views

CVE-2026-91944 crawl4ai before 0.9.3 DOM-based XSS via Playground UI

crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like th...

5.1CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 2026/09/15 3:18 p.m.7 views

CVE-2026-91944

crawl4ai versions before 0.9.3 are affected by a DOM-based XSS in the Playground UI. The root cause is in the forceHighlightElement() function, which assigns textContent back to innerHTML, causing JSON responses to be re-parsed as HTML. An attacker can inject malicious scripts via crawled page co...

6.1CVSS5.5AI score0.00247EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/15 3:18 p.m.10 views

CVE-2026-91942

crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Docker Playground UI . The root cause is that untrusted crawl results are assigned to element.innerHTML, allowing an attacker to craft malicious PDFs with event-handler markup that execute JavaScript in t...

5.4CVSS5.8AI score0.00223EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/15 3:18 p.m.11 views

EUVD-2026-78799

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers can craft malicious PDFs with event-handler markup to execute JavaScript in the Playground origin and steal API tokens fro...

5.4CVSS5.8AI score0.00223EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/15 3:18 p.m.5 views

CVE-2026-91942 crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers can craft malicious PDFs with event-handler markup to execute JavaScript in the Playground origin and steal API tokens fro...

5.1CVSS5.8AI score
SaveExploits0References4
NVD
NVD
added 2026/09/15 1:17 p.m.5 views

CVE-2026-92069

Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

0.00144EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/15 1:17 p.m.6 views

CVE-2026-92059

Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

0.00144EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/15 1:16 p.m.6 views

CVE-2026-92041

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

0.00159EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/15 1:16 p.m.5 views

CVE-2026-92037

Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

0.0015EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/15 1:16 p.m.7 views

CVE-2026-92039

Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

0.00159EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/15 1:16 p.m.5 views

CVE-2026-92042

Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

0.00152EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/15 1:16 p.m.6 views

DEBIAN-CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

5.9AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 1:16 p.m.4 views

CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

0.00164EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/15 1:16 p.m.7 views

DEBIAN-CVE-2026-92028

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

5.9AI score0.0016EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/15 1:16 p.m.7 views

DEBIAN-CVE-2026-92027

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

5.9AI score0.0016EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 1:16 p.m.8 views

CVE-2026-92028

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

0.0016EPSS
SaveExploits0References8
Rows per page
Query Builder