Lucene search
K

553 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/22 3:1 p.m.2 views

CVE-2026-25681

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

6.1CVSS6AI score0.00031EPSS
Exploits0References5
OSV
OSV
added 2026/05/19 8:29 p.m.3 views

GHSA-RFH7-FXQC-Q52V @angular/platform-server: SSRF via Hostname Hijacking

Impact A Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering SSR engine processes the request URL provided to the rendering entry points. When an absolute-form URL e.g., http://evil.com is passed to the rendering...

8.8CVSS5.8AI score
Exploits0References3
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в webkit2gtk

A memory management issue related to “use after free” operations has been addressed through improved memory management practices. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2, as well as watchOS 8.3. Processing maliciously crafted web content may...

8.8CVSS7.2AI score0.00937EPSS
Exploits0References2
Fedora
Fedora
added 2026/04/14 1:0 a.m.4 views

[SECURITY] Fedora 43 Update: webkitgtk-2.52.1-1.fc43

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

7.5CVSS7AI score0.01495EPSS
Exploits2
CVE
CVE
added 2026/02/10 5:51 p.m.40 views

CVE-2026-21513

CVE-2026-21513 is a security feature bypass vulnerability in the MSHTML Framework. Affected component: MSHTML/MSHTML Framework used by Windows’ browsing/rendering stack. Root cause details are described in vendor advisories and security blogs as a protection mechanism bypass that can be triggered...

8.8CVSS5.5AI score0.2798EPSS
In wildExploits0References4Affected Software13
ATTACKERKB
ATTACKERKB
added 2026/02/10 5:51 p.m.2 views

CVE-2026-21513

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.5AI score0.2798EPSS
In wildExploits0References2Affected Software21
RedhatCVE
RedhatCVE
added 2025/12/20 12:12 a.m.7 views

CVE-2025-67843

A Server-Side Template Injection SSTI vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file...

9.8CVSS8.1AI score0.00819EPSS
Exploits1References1
OSV
OSV
added 2025/12/19 2:16 a.m.2 views

CVE-2025-67843

A Server-Side Template Injection SSTI vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file...

9.8CVSS6.2AI score0.00819EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/12/19 12:0 a.m.3 views

Mintlify 安全漏洞

Mintlify is an AI-driven documentation platform from US-based Mintlify. A security vulnerability exists in versions of Mintlify prior to 2025-11-15 that stems from server-side template injection in the MDX Rendering Engine and could lead to the execution of arbitrary code...

9.8CVSS7.2AI score0.00819EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/19 12:0 a.m.4 views

CVE-2025-67843

A Server-Side Template Injection SSTI vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file...

8.3CVSS7.7AI score0.00819EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/19 12:0 a.m.21 views

CVE-2025-67843

A Server-Side Template Injection SSTI vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file...

8.3CVSS0.00819EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.3 views

PT-2025-52404

Name of the Vulnerable Software and Affected Versions Mintlify Platform versions prior to 2025-11-15 Description A Server-Side Template Injection SSTI flaw exists in the MDX Rendering Engine of Mintlify Platform. This issue allows remote attackers to execute arbitrary code through inline JSX...

8.3CVSS7.6AI score0.00819EPSS
Exploits1References11
Fedora
Fedora
added 2025/12/02 1:34 a.m.4 views

[SECURITY] Fedora 42 Update: webkitgtk-2.50.2-1.fc42

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

9.8CVSS7.8AI score0.00936EPSS
Exploits1
Fedora
Fedora
added 2025/11/13 1:10 a.m.4 views

[SECURITY] Fedora 42 Update: webkitgtk-2.50.1-1.fc42

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

9.8CVSS6.6AI score0.00323EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/10/13 1:44 a.m.1 views

webkitgtk: Processing maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks...

8CVSS5.7AI score0.00522EPSS
Exploits0References5
Fedora
Fedora
added 2025/10/10 1:4 a.m.3 views

[SECURITY] Fedora 41 Update: webkitgtk-2.50.0-2.fc41

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

9.8CVSS6.8AI score0.00554EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-7573

Malware in sbrugna...

9.3CVSS9.1AI score0.08675EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-5571

Malware in sbrugna...

7.2CVSS6.3AI score0.01176EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-5742

Malware in sbrugna...

7.2CVSS6.1AI score0.01068EPSS
Exploits6References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-2853

Malware in sbrugna...

9.3CVSS9.1AI score0.04965EPSS
Exploits0References4
Rows per page
Query Builder