Lucene search
+L

95830 matches found

OSV
OSV
added 2026/07/30 8:55 p.m.5 views

CVE-2026-61526 AdonisJS HTTP Server is vulnerable to reflected XSS through its exception handler

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through 8.2.0 and 9.0.0 through 9.0.2, the error.message is interpolated into the default HTML exception response without escaping, allowing a crafted missing-route URL to execute...

6.1CVSS5.6AI score
SaveExploits0References7
NVD
NVD
added 2026/07/30 8:16 p.m.10 views

CVE-2025-51684

CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting XSS. The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of...

6.1CVSS0.00217EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/07/30 5:6 p.m.8 views

SUSE CVE-2026-17818

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

6.1CVSS5.7AI score0.00171EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:6 p.m.8 views

SUSE CVE-2026-17820

Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00201EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:6 p.m.7 views

SUSE CVE-2026-17823

Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00178EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:6 p.m.6 views

SUSE CVE-2026-17825

Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00217EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:6 p.m.6 views

SUSE CVE-2026-17826

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS5.5AI score0.00174EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:6 p.m.7 views

SUSE CVE-2026-17827

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

6.1CVSS5.7AI score0.00171EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.10 views

SUSE CVE-2026-17829

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00201EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.7 views

SUSE CVE-2026-17830

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00262EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.6 views

SUSE CVE-2026-17831

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00264EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.7 views

SUSE CVE-2026-17833

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00164EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.6 views

SUSE CVE-2026-17834

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00253EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.6 views

SUSE CVE-2026-17835

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00218EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.7 views

SUSE CVE-2026-17837

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00253EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.7 views

SUSE CVE-2026-17838

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00218EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.7 views

SUSE CVE-2026-17840

Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00238EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.8 views

SUSE CVE-2026-17841

Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00174EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.7 views

SUSE CVE-2026-17842

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00194EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 5:5 p.m.7 views

SUSE CVE-2026-17843

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00174EPSS
SaveExploits0References3
Rows per page
Query Builder