6373 matches found
PT-2025-34809
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.154 Chromium versions prior to 139.0.7258.154-1deb12u1 bookworm Chromium versions prior to 139.0.7258.154-1deb13u1 trixie Chromium version 140.0.7339.80-alt0.p11.1 Description A critical issue exists ...
Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape
Titles: Microsoft Edge Renderer Process Mojo IPC 134.0.6998.177 - Sandbox Escape Author: nu11secur1ty Date: 08/07/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/software-download/windows11 Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49730...
U.S. Dept Of Defense: CVE‑2025‑4123 — Grafana Open Redirect → Stored XSS → SSRF (Full Read) at ██████
A vulnerability, identified as CVE-2025-4123, was discovered in Grafana OSS and Enterprise versions 8.x through 12.x. The vulnerability allowed unauthenticated attackers to chain multiple flaws, including an open redirect through path traversal in the public redirect handler, stored cross-site...
GHSA-XFFM-G5W8-QVG7 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
GHSA-XFFM-G5W8-QVG7 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
GO-2025-3778 Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs
Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs...
VulnCheck KEV: CVE-2025-4123
A cross-site scripting XSS vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permission...
Malicious code in your-test-renderer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1133758e2658958e3fbaaaee2db0c856e5ba745f18589b79e6c04859207dd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5740 Malicious code in your-test-renderer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1133758e2658958e3fbaaaee2db0c856e5ba745f18589b79e6c04859207dd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Gogs XSS allowed by stored call in PDF renderer
Summary A stored XSS is present in Gogs which allows client-side Javascript code execution. Details Gogs Version: docker images REPOSITORY TAG IMAGE ID CREATED SIZE gogs/gogs latest fe92583bc4fe 10 hours ago 99.3MB Application version: 0.14.0+dev Local setup using: bash Pull image from Docker Hub...
CVE-2025-47943
CVE-2025-47943 affects Gogs (self-hosted Git service). The vulnerability is a stored XSS in the PDF rendering path, caused by an outdated pdfjs-1.4.20 component located under public/plugins/. Affected versions are 0.14.0+dev and prior. The issue has been fixed in gogs.io/gogs with version 0.13.3 ...
CVE-2025-47943 Gogs stored XSS in PDF renderer
Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...
CVE-2025-47943 Gogs stored XSS in PDF renderer
Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...
PT-2026-31498
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A flaw in policy enforcement within the browser's user interface allowed a remote attacker who had already compromised the renderer process to manipulate the Omnibox URL bar by presenti...
GHSA-G5HG-P3PH-G8QG vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
CVE-2025-48997 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
CVE-2025-48997 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
GHSA-G5HG-P3PH-G8QG vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...