4679 matches found
CVE-2026-106147 Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery
In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item template renders the bound dataTextField value as raw HTML without encoding. An attacker who can modify the bound data can supply HTML containing event handlers that execute...
CVE-2026-106161
Progress Kendo UI for jQuery releases from v2020.1.114 up to (but not including) v2026.3.1015 are vulnerable to Cross-Site Scripting (XSS) . The Badge text method fails to encode string values, rendering them as raw HTML even when supplied through text binding. An attacker capable of modifying bo...
EUVD-2026-102085
In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method renders string values as raw HTML without encoding, including values supplied through text binding. An attacker who can modify data bound to a Badge can supply HTML containing even...
CVE-2026-106161 Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery
In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method renders string values as raw HTML without encoding, including values supplied through text binding. An attacker who can modify data bound to a Badge can supply HTML containing even...
CVE-2026-106161
In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method renders string values as raw HTML without encoding, including values supplied through text binding. An attacker who can modify data bound to a Badge can supply HTML containing even...
CVE-2026-63430: Improper Neutralization of Input During Web Page Generation
ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit mutation cross-site scripting. ammonia...
CVE-2026-106161: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method renders string values as raw HTML without encoding, including values supplied through text binding. An attacker who can modify data bound to a Badge can supply HTML containing even...
Microsoft Windows Raw Image Extension < 2.4.36.0 / 2.5.35.0 RCE (October 2026)
The Windows 'Raw Image Extension' app installed on the remote host is prior to 2.4.36.0 2.5.35.0 on Windows 11 versions 21H2 and 26H2. It is, therefore, affected by multiple remote code execution vulnerabilities: - A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw...
PT-2026-114932
In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item template renders the bound dataTextField value as raw HTML without encoding. An attacker who can modify the bound data can supply HTML containing event handlers that execute...
RAW image plugin Integer Overflow RCE
The vulnerability of the plugin for viewing RAW images is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-42093
The Redash data visualization package (versions after 8.0.0 until 26.9.0 ) is vulnerable to SQL Injection in the Query Results query runner located in redash/query_runner/query_results.py. The flaw occurs because the system accepts param_query_N_{key=value} parameters and passes attacker-controll...
RAW image plugin Heap Buffer Overflow RCE
The vulnerability of the plugin for viewing RAW images is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-114200
Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query runner/query results.py accepts param query N key=value parameters and passed attacker-controlled values to replace query parameters for raw substitution...
CVE-2026-96943
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-96202
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
EUVD-2026-100266
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-96202
A heap-based buffer overflow exists in the Windows Raw Image Extension . This vulnerability enables an unauthorized attacker to achieve remote code execution over a network. The issue is associated with CWE-122 . No specific exploit details or information regarding in-the-wild exploitation are pr...
EUVD-2026-99794
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-96943
A vulnerability exists in the Windows Raw Image Extension due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-...
