CVE-2026-50292

A flaw was found in libinput. A local attacker with access to /dev/uinput can inject arbitrary udev properties through the libinput-device-group helper. This injection can lead to root code execution, for example, by exploiting REMOVECMD properties that are executed when a device is removed. This...

CVE-2026-50265

Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292...

编号撤回

libinput is an open-source library from freedesktop. It provides a complete input stack for applications that need to handle input devices provided by the kernel. There is a security vulnerability in libinput, which stems from the ability to inject arbitrary udev properties through the...

SUSE CVE-2014-0014

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting XSS attacks by leveraging an application using the "group" Helper and a crafted payload...

GHSA-RCX6-7JP6-PQF2 ember-source Cross-site Scripting vulnerability

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting XSS attacks by leveraging an application using the group Helper and a crafted payload...

CVE-2014-0014: Improper Neutralization of Input During Web Page Generation

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting XSS attacks by leveraging an application using the "group" Helper and a crafted payload...

PT-2018-4117

Name of the Vulnerable Software and Affected Versions Ember.js versions 1.0.x through 1.0.0 Ember.js versions 1.1.x through 1.1.2 Ember.js versions 1.2.x through 1.2.0 Ember.js versions 1.3.x through 1.3.0 Ember.js versions 1.4.x through 1.4.0-beta.1 Description The issue allows remote attackers ...