73148 matches found
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...
firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: WebAssembly component...
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
A flaw was found in the brace-expansion library. The expand function does not apply maxLength when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is...
CVE-2026-9318
A flaw was found in tablib. This vulnerability, a stored cross-site scripting XSS issue, allows a remote attacker to execute arbitrary JavaScript code. By embedding malicious payloads within dataset titles, which are not properly sanitized during HTML export, an attacker can trigger the execution...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the exportbook function in the HTML format handler. An attacker can execute arbitrary JavaScript in the context of the user's browser by embedding malicious payloads in dataset titles, which are rendered...
CVE-2026-19138 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19145 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19146 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19149 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-FF4P-927C-7922 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19168 vulnerabilities
Vulnerabilities for packages: chromium...
WordPress Custom CSS and JavaScript data leakage vulnerabilities
WordPress Custom CSS and JavaScript allow for the addition of custom styles and interactive scripts through backend or plugins, without modifying the core theme files. This enables fine-tuning of the interface and expansion of functionality. However, WordPress Custom CSS and JavaScript have a dat...
CVE-2026-73413: Uncontrolled Resource Consumption
Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose in src/internal/compose.js repeatedly joins and slices flag fragments when flagProtection is enabled, which is the default, making processing quadratic in input size...
CVE-2026-73422: Improper Neutralization of Input During Web Page Generation
Astro is a web framework for content-driven websites. From 2.9.0 until 7.1.0, Astro's server-side View Transition CSS generator interpolates animation properties into an inline style element without escaping them for CSS and HTML contexts. An attacker-controlled View Transition animation value su...
PT-2026-70978
Name of the Vulnerable Software and Affected Versions tablib versions prior to 3.10.0 Description A stored cross-site scripting issue exists in the HTML export functionality. Attackers can execute arbitrary JavaScript by embedding malicious payloads in dataset titles. This occurs when the export...
PT-2026-71221
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session...