CVE-2026-116047

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. The attack can be launched remotely. The exploit...

CVE-2026-116047 Privoce Vocechat Query Parameter widget.html cross site scripting

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. The attack can be launched remotely. The exploit...

CVE-2026-116047

A cross-site scripting (XSS) vulnerability exists in Privoce Vocechat versions up to 0.9.121 . The flaw resides in the Query Parameter Handler component, specifically involving the processing of the widget.html file. By manipulating the welcome argument, a remote attacker can execute malicious sc...

EUVD-2026-109371

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. The attack can be launched remotely. The exploit...

CVE-2026-116047 Privoce Vocechat Query Parameter widget.html cross site scripting

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. The attack can be launched remotely. The exploit...

PT-2026-122957

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. The attack can be launched remotely. The exploit...

Privoce VoceChat cross-site scripting vulnerability

Privoce VoceChat versions 0.9.121 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the “welcome” parameter by the Query Parameter Handler component in the widget.html file, potentially enabling cross-site scripting attacks...

Linux Distros Unpatched Vulnerability : CVE-2026-108834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query...

CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

UBUNTU-CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

CVE-2026-108834 Cairo-dock Glx-Dock Query Parameter ww_page.php cross site scripting

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

EUVD-2026-97361

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

CVE-2026-108834

A cross-site scripting (XSS) vulnerability exists in Cairo-dock Glx-Dock up to version 3.4.0 . The flaw is located in the Query Parameter Handler component, specifically involving the processing of the ww_page.php file. By manipulating the p argument, an attacker can execute a remote XSS attack. ...

CVE-2026-108834 Cairo-dock Glx-Dock Query Parameter ww_page.php cross site scripting

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

PT-2026-110545

Name of the Vulnerable Software and Affected Versions Cairo-dock Glx-Dock versions prior to 3.4.1 Description Remote cross site scripting is possible due to improper processing of the p argument within the Query Parameter Handler component in the ww page.php file. Cross site scripting is a...

CVE-2026-108834: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

Tenda CH22 Parameter Handler Heap Buffer Overflow

The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

PT-2026-79655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the WMM param handler function within the rtl8723bs staging driver. The function copies a fixed-size WMM parameter element from a received information...

CVE-2026-19351

A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the library lib/Select.js of the component Request Parameter Handler. Performing a manipulation results in sql injection. It is...