Lucene search
+L

31570 matches found

BDU FSTEC
BDU FSTEC
added 2026/01/16 12:00 a.m.13 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to gain access to read, modify, and delete data.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to gain access to, read, modify, and delete data through a specially creat...

10CVSS7AI score0.00329EPSS
SaveExploits0References11Affected Software4
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.15 views

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by the American company Google. There is a security vulnerability in Google Chrome, which stems from improper implementations in the V8 engine...

8.8CVSS7.3AI score0.00262EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.9 views

MiracleLinux 3 : firefox-24.5.0-1.0.2.AXS3 (AXSA:2014-356:03)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-356:03 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...

9.8CVSS8.4AI score0.07749EPSS
SaveExploits5References8
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

Cisco Firepower Threat Defense (FTD) Software Multiple Vulnerabilities (cisco-sa-snort3-dcerpc-vulns-J9HNF4tH)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by the following vulnerabilities: - A vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak...

5.8CVSS6.1AI score0.00651EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.28 views

RockyLinux 8 : firefox (RLSA-2026:0667)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:0667 advisory. firefox: Spoofing issue in the Downloads Panel component CVE-2025-14327 firefox: Use-after-free in the JavaScript: GC component CVE-2026-0885 firefox:...

9.8CVSS5.7AI score0.00606EPSS
SaveExploits0References27
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

Microsoft Edge (Chromium) < 144.0.3719.82 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 144.0.3719.82. It is, therefore, affected by multiple vulnerabilities as referenced in the January 16, 2026 advisory. - Use after free in ANGLE. CVE-2026-0908 - Microsoft Edge Elevation Service exposes a privileged COM...

9.8CVSS7.2AI score0.07982EPSS
SaveExploits0References23
OSV
OSV
added 2026/01/15 11:15 p.m.10 views

CVE-2026-1010

A stored cross-site scripting XSS vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data. When an administrator views the affected workflow,...

5.4CVSS5.9AI score0.00315EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/15 11:15 p.m.24 views

CVE-2026-1010

A stored cross-site scripting XSS vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data. When an administrator views the affected workflow,...

8CVSS0.00315EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/15 11:00 p.m.6 views

CVE-2026-1010

A stored cross-site scripting XSS vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data. When an administrator views the affected workflow,...

8CVSS5.4AI score0.00315EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/15 11:00 p.m.8 views

CVE-2026-1010 Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation

A stored cross-site scripting XSS vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data. When an administrator views the affected workflow,...

8CVSS5.4AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/15 11:00 p.m.37 views

CVE-2026-1010 Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation

A stored cross-site scripting XSS vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data. When an administrator views the affected workflow,...

8CVSS0.00315EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/15 11:00 p.m.29 views

CVE-2026-1010

CVE-2026-1010 is a stored XSS vulnerability in the Altium Workflow Engine caused by missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data, and when an administrator views the affected workflow, the ...

8CVSS5.4AI score0.00315EPSS
SaveExploits0References1Affected Software1
Hacker One
Hacker One
added 2026/01/15 10:00 p.m.18 views

Node.js: HashDoS in V8

Vulnerability description not provided...

5.9CVSS6.5AI score0.00268EPSS
SaveExploits0
OSV
OSV
added 2026/01/15 9:16 p.m.14 views

CVE-2026-21903

A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to cause a Denial-of-Service DoS. Subscribing to telemetry sensors at scale causes all FPC connections to drop, resulting...

6.5CVSS5.8AI score0.00382EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/15 9:16 p.m.11 views

CVE-2026-21903

A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to cause a Denial-of-Service DoS. Subscribing to telemetry sensors at scale causes all FPC connections to drop, resulting...

7.1CVSS0.00382EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/15 8:20 p.m.48 views

CVE-2026-21906 Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash

An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker sending a specific ICMP packet through a GRE tunnel to cause the PFE to crash and restart. When PowerMode...

8.7CVSS0.00517EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/15 8:18 p.m.34 views

CVE-2026-21903

CVE-2026-21903 is a stack-based buffer overflow in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS. A network-based attacker with low privileges can trigger a Denial-of-Service by subscribing to telemetry sensors at scale, which causes all FPC connections to drop, an FPC crash, an...

7.1CVSS6.5AI score0.00382EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/15 8:18 p.m.6 views

CVE-2026-21903 Junos OS: Subscribing to telemetry sensors at scale causes all FPCs to crash

A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to cause a Denial-of-Service DoS. Subscribing to telemetry sensors at scale causes all FPC connections to drop, resulting...

7.1CVSS6.5AI score0.00382EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/15 8:18 p.m.5 views

CVE-2026-21903

A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to cause a Denial-of-Service DoS. Subscribing to telemetry sensors at scale causes all FPC connections to drop, resulting...

7.1CVSS5.5AI score0.00382EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/01/15 8:18 p.m.18 views

EUVD-2026-2692

A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to cause a Denial-of-Service DoS. Subscribing to telemetry sensors at scale causes all FPC connections to drop, resulting...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References3
Rows per page
Query Builder