4332995 matches found
CVE-2026-66921
Pivotick’s Markdown node-reference renderer is vulnerable to stored DOM-based XSS if node names are interpolated into HTML attributes and span content without proper escaping. The root cause is insufficient HTML escaping for ampersands, angle brackets, and quotation marks in nodeName, enabling an...
CVE-2026-66921 Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References
Pivotick’s Markdown node-reference renderer failed to HTML-escape the attacker-controlled nodeName value before interpolating it into both the data-node-name attribute and the body of a generated element. Because the node-reference tokenizer rejected only square brackets, a crafted node name coul...
CVE-2026-66921 Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References
Pivotick’s Markdown node-reference renderer failed to HTML-escape the attacker-controlled nodeName value before interpolating it into both the data-node-name attribute and the body of a generated element. Because the node-reference tokenizer rejected only square brackets, a crafted node name coul...
CVE-2026-64234
A flaw was found in the Linux kernel's tty subsystem, specifically within the pchuart serial driver. This vulnerability occurs due to a missing check for the return value of dmaalloccoherent. An attacker could potentially exploit this to trigger a NULL pointer dereference in the dmahandlerx...
CVE-2026-64216
No description is available for this CVE...
CVE-2026-17572
A flaw was found in HDF5, a data management library. This vulnerability, a heap-based buffer overflow, allows a local attacker to cause a denial of service DoS by persuading a user to open a specially crafted HDF5 file. The malformed file can trigger out-of-bounds memory operations, leading to...
CVE-2026-13868
An inappropriate implementation flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497453475...
CVE-2026-13858
An out of bounds read flaw was found in the FFmpeg component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507090179...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.31 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
CVE-2026-13820
An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512986879...
CVE-2026-13796
An integer overflow flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=491894115...
CVE-2026-13806
An insufficient validation of untrusted input flaw was found in the Accessibility component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503333798...
CVE-2026-13812
An insufficient validation of untrusted input flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=508293203...
CVE-2026-13777
An insufficient validation of untrusted input flaw was found in the iOSWeb component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513128566...
CVE-2026-13776
A type confusion flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513012139...
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default. The critical issue, tracked as CVE-2026-53921 and rated 9.8 on CVSS 3.1 in OpenWrt's GitHub advisory, lets an unauthenticated attacke...
CVE-2026-53921
CVE-2026-53921 is an OpenWrt odhcpd (DHCPv6) flaw described across connected documents: two independent pre-authentication overflow paths in the DHCPv6 request-processing path cause a stack buffer overflow in a 512-byte buffer when handling crafted IA options. An unauthenticated attacker sending ...
CVE-2026-13803
A type confusion flaw was found in the Chrome Tabs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501669642...
CVE-2026-13813
An insufficient validation of untrusted input flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=508462149...