CVE-2026-21088

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21088

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...

EUVD-2006-0738

Malware in sbrugna...

PT-2021-3773 · Cockpit +5 · Cockpit +5

Name of the Vulnerable Software and Affected Versions: Cockpit affected versions not specified Description: The issue is related to clickjacking attacks, where a malicious website can render a page from a Cockpit server inside an iframe HTML entry. This could be exploited by a malicious website t...

UBUNTU-CVE-2017-2549

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

CVE-2017-2549

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

CVE-2017-2549: Improper Neutralization of Input During Web Page Generation

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

PT-2017-15442

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.2 Safari versions prior to 10.1.1 tvOS versions prior to 10.2.1 Description The issue involves the WebKit component and allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that...

PT-2012-5920

Name of the Vulnerable Software and Affected Versions TikiWiki CMS/Groupware version 8.3 Description The issue allows remote attackers to load arbitrary web site pages into frames, which can be used to conduct phishing attacks. This is achieved via the url parameter in the tiki-featured link.php...

CVE-2006-0731

WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing phishing attacks via an absolute URL in the url parameter, which loads the URL inside a frame...

Mozilla Firefox < 1.7.1 Cross-Domain Frame Loading Vulnerability (deprecated)

Binary data 1772.prm...

Opera < 7.53 Multiple Vulnerabilities

The version of Opera installed on the remote host is vulnerable to two security issues : - A cross domain frame loading vulnerability. - An unspecified vulnerability in the way it handles certificates. An attacker may exploit one of these flaws to impersonate a web server. C Tenable Network...