CVE-2026-66825: Improper Neutralization of Input During Web Page Generation

Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with link-like properties, such as url, uri, href, link, website, or homepage, were rendered as hyperlinks without validating their URL scheme. An attacker able to supply or influence...

openSUSE Security Update : MozillaThunderbird (openSUSE-2019-182)

This update for MozillaThunderbird to version 60.5.0 fixes the following issues : Security vulnerabilities addressed MFSA 2019-03 boo1122983 MFSA 2018-31 : - CVE-2018-18500: Use-after-free parsing HTML5 stream - CVE-2018-18505: Privilege escalation through IPC channel messages - CVE-2016-5824: Do...

SAP MaxDB Data Link Properties Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP MaxDB. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of UDL fil...

CVE-2011-1250: Use of Uninitialized Resource

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "Link Properties Handling Memory Corruption Vulnerability."...