Lucene search
+L

60490 matches found

SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.14 views

SUSE CVE-2026-16368

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

9.8CVSS5.8AI score0.00388EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.9 views

SUSE CVE-2026-16369

Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

9.8CVSS5.9AI score0.00436EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/07/22 12:9 a.m.7 views

SUSE CVE-2026-16392

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

9.1CVSS5.8AI score0.00385EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/22 12:9 a.m.8 views

SUSE CVE-2026-16410

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

9.8CVSS5.8AI score0.00305EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.7 views

PT-2026-63506

Name of the Vulnerable Software and Affected Versions Regular Labs extensions affected versions not specified Description Cross-site scripting XSS is possible through tag-provided custom HTML, module content or title overrides, and decoded modal or tooltip values. This allows a content author to...

5.4CVSS5.8AI score0.00133EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.7 views

PT-2026-63507

Name of the Vulnerable Software and Affected Versions Sourcerer extension affected versions not specified Description Multiple code injection vectors exist within the extension. The Free version fails to verify that both the article creator and the last modifier possess Super User privileges befo...

5.9AI score0.00285EPSS
SaveExploits0References3
Redos
Redos
added 2026/07/22 12:0 a.m.6 views

ROS-20260722-73-0031

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00344EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.13 views

PT-2026-63498

Name of the Vulnerable Software and Affected Versions Regular Labs conditions manager affected versions not specified Description Stored condition values can be used to execute malicious HTML or JavaScript within administrator summaries. This is a Cross-Site Scripting XSS issue, where a script is...

4.8CVSS6AI score0.00142EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.12 views

PT-2026-63356

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows authenticated users to bypass path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This lets an attacker plant a crafted...

8.9CVSS5.5AI score0.00241EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.10 views

PT-2026-63475

An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves improper memory handling during document processing...

7.1CVSS5.3AI score0.00245EPSS
SaveExploits0References2
Redos
Redos
added 2026/07/22 12:0 a.m.7 views

ROS-20260722-73-0007

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.3CVSS5AI score0.00163EPSS
SaveExploits0
Redos
Redos
added 2026/07/22 12:0 a.m.6 views

ROS-20260722-73-0034

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00296EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/07/22 12:0 a.m.5 views

Уязвимость компонента V8 браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код внутри песочницы

Уязвимость компонента V8 браузеров Google Chrome и Microsoft Edge связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код внутри песочницы через созданную HTML-страницу...

10CVSS5.8AI score0.0028EPSS
SaveExploits1References5Affected Software3
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.14 views

PT-2026-63470

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-sid...

7.1CVSS5.3AI score0.00232EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/07/21 10:4 p.m.7 views

CVE-2026-16418

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/07/21 10:4 p.m.4 views

CVE-2026-16418

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

6.5AI score0.00271EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/21 10:3 p.m.10 views

GHSA-5QHF-9PHG-95M2 Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons

Summary Loofah::HTML5::Scrub.alloweduri? does not correctly reject javascript: or vbscript: URIs when the scheme is split by a numeric character reference that has no trailing semicolon. A browser decodes such references and resolves the URL to an executable javascript: scheme, while alloweduri?...

2.3CVSS4.9AI score
SaveExploits0References4
NVD
NVD
added 2026/07/21 9:16 p.m.6 views

CVE-2026-47687

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the selectForm helper in fogpage.class.php renders labels using raw, unescaped user input. An unauthenticated attacker who knows any registered host's MAC address...

7.3CVSS0.00217EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/21 7:7 p.m.11 views

EUVD-2026-42324

OpenTelemetry JavaScript: Denial of service in JaegerPropagator via unhandled exception on a malformed header...

7.5CVSS5.2AI score0.00455EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/21 5:0 p.m.9 views

CVE-2026-44228

A flaw was found in RT, an issue and ticket tracking system. This stored Cross-Site Scripting XSS vulnerability allows an authenticated user to inject malicious JavaScript code into the system. When another user views the affected page, the injected script executes, potentially leading to...

5.4CVSS5.3AI score0.00147EPSS
SaveExploits0References2
Rows per page
Query Builder