241965 matches found
ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...
ECHO-F836-71CF-434B
Bulletin has no description...
MINI-44JR-6VC3-8CRM
Bulletin has no description...
MINI-79GG-F776-W44M
Bulletin has no description...
MINI-FC3R-5MQV-6RXX
Bulletin has no description...
MINI-WFRQ-J94W-45VH
Bulletin has no description...
MINI-9XVC-GJ8V-995X
Bulletin has no description...
MINI-WH95-4P5J-4GPV
Bulletin has no description...
MINI-X2W7-HQ2Q-94XF
Bulletin has no description...
DEBIAN-CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...
CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...
UBUNTU-CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...
UBUNTU-CVE-2026-55558
aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...
CGA-7W6W-PQPR-3RHW
Bulletin has no description...
CGA-WV54-VPGJ-V2JQ
Bulletin has no description...
MINI-43C2-QM78-M77J
Bulletin has no description...
MINI-2VJX-26F4-3MC8
Bulletin has no description...
MINI-W8WX-FP32-V88C
Bulletin has no description...