Lucene search
K

56 matches found

CNNVD
CNNVD
added 2026/03/11 12:0 a.m.3 views

A cubism panel for Grafana 跨站脚本漏洞

The "Cubism Panel for Grafana" is a visualization plugin developed by ekacnet’s individual developers. Versions of the cubism panel for Grafana prior to 0.1.2 contain a cross-site scripting vulnerability. This vulnerability arises from the panel’s zooming link processor not verifying URL schemes...

7.6CVSS6AI score0.00265EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/28 9:47 p.m.4 views

CVE-2026-28558 wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload functionality. Attackers upload a crafted SVG containing CSS injection or JavaScript event handlers that execute in the...

6.4CVSS5.8AI score0.00208EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/08/06 12:0 a.m.7 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

10CVSS7.5AI score0.0025EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/05/06 12:0 a.m.2 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially crafted...

10CVSS8.3AI score0.00402EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/11 12:0 a.m.5 views

The vulnerability of JavaScript script handlers in Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome browsers is related to buffer overflow in the “cull” mechanism. Exploiting this vulnerability allows a malicious actor to partially compromise the confidentiality, integrity, and accessibility of the protected information through a...

7.5CVSS7.8AI score0.00323EPSS
Exploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:0 a.m.3 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially crafted HTML page...

7.5CVSS7.2AI score0.0034EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.3 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the execution of operations beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

10CVSS8.4AI score0.00383EPSS
Exploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.2 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

10CVSS7.4AI score0.15111EPSS
Exploits2References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:0 a.m.4 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

10CVSS7.2AI score0.00475EPSS
Exploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.4 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

10CVSS7.8AI score0.0585EPSS
Exploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.4 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside of the buffer in memory, resulting from improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious act...

10CVSS7.6AI score0.00472EPSS
Exploits1References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.3 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to memory-related write operations. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS7.2AI score0.00491EPSS
Exploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/17 12:0 a.m.5 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to corrupt dynamic memory.

Vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers. Exploiting this vulnerability can allow a remote attacker to corrupt dynamic memory through a specially crafted HTML page...

10CVSS7.2AI score0.17227EPSS
Exploits2References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:0 a.m.3 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted HTML page...

10CVSS7.3AI score0.00597EPSS
Exploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.4 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain full control over the application.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application through a specially...

3.1CVSS7.6AI score0.00499EPSS
Exploits1References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/06/28 12:0 a.m.4 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources using incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a created HTML page...

10CVSS8.1AI score0.01123EPSS
Exploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/06/21 12:0 a.m.6 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially created HTML page...

10CVSS8.1AI score0.00518EPSS
Exploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/06/21 12:0 a.m.5 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to expose sensitive information through a specially created HTML page...

7.8CVSS7.6AI score0.00477EPSS
Exploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/05/06 12:0 a.m.4 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed during the processing of objects in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

10CVSS6.4AI score0.01006EPSS
Exploits1References19Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/04/26 12:0 a.m.5 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page or file...

10CVSS7.3AI score0.01228EPSS
Exploits1References17Affected Software7
Rows per page
Query Builder