Lucene search
+L

7 matches found

CNNVD
CNNVD
•added 2026/10/19 4:00 p.m.•15 views

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in Text components. A remote attacker can execute arbitrary code within a sandbox by using a specially crafted HTML page...

8.8CVSS7.4AI score0.0037EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/07 8:37 p.m.•20 views

CVE-2026-55647 DataEase: authenticated stored XSS in the dashboard text components

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTML sanitization, allowing an authenticated user who can edit dashboard component data to inject HTML with executable...

5.1CVSS6AI score0.00467EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/07 8:37 p.m.•52 views

CVE-2026-55647

DataEase (open source data visualization/analysis tool) contains an XSS flaw in dashboard text components. Before version 2.10.24, stored content rendered via Vue v-html without server-side sanitization, enabling an authenticated user who can edit dashboard component data to inject HTML with exec...

5.1CVSS6AI score0.00467EPSS
SaveExploits0References3
Mend
Mend
•added 2026/07/07 8:37 p.m.•18 views

CVE-2026-55647

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTML sanitization, allowing an authenticated user who can edit dashboard component data to inject HTML with executable...

5.4CVSS6AI score0.00467EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/07 12:00 a.m.•11 views

CVE-2026-55647: Improper Neutralization of Input During Web Page Generation

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTML sanitization, allowing an authenticated user who can edit dashboard component data to inject HTML with executable...

5.1CVSS6AI score0.00467EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•37 views

VMware Cloud Foundation Operations security vulnerabilities

VMware Cloud Foundation Operations is a private cloud operations management platform provided by the American company VMware. There is a security vulnerability in VMware Cloud Foundation Operations. This vulnerability stems from multiple storage-based cross-site scripting vulnerabilities, which...

8CVSS7.3AI score0.00313EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/24 12:00 a.m.•26 views

Mozilla’s various products: code-related issues and vulnerabilities

Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...

7.5CVSS7.1AI score0.0046EPSS
SaveExploits0References5
Rows per page
Query Builder