Lucene search
K

99 matches found

NVD
NVD
added last week6 views

CVE-2026-9993

Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: High...

8.3CVSS0.00118EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/20 12:30 a.m.1 views

EUVD-2026-23712

A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing authentication. The attack may be initiated remotely. The exploit has been made available to the...

6.9CVSS5.4AI score0.00136EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/01/29 3:26 a.m.2 views

CVE-2025-69517

An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agentid parameter accepts up to 255 characters and is improperly sanitized...

8.8CVSS5.9AI score0.00028EPSS
Exploits0References1
CVE
CVE
added 2026/01/28 12:0 a.m.9 views

CVE-2025-69517

CVE-2025-69517 involves Amidaware Inc Tactical RMM v1.3.1 and earlier. A remote HTML injection occurs when creating a new agent via POST /api/v3/newagent/; the agent_id field (max 255 chars) is sanitized with DOMPurify.sanitize() with html: true, which does not filter HTML adequately. The injecte...

8.8CVSS5.9AI score0.00028EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/28 12:0 a.m.3 views

CVE-2025-69517

An HTML injection vulnerability in Amidaware Inc Tactical RMM v1.3.1 and earlier allows authenticated users to inject arbitrary HTML content during the creation of a new agent via the POST /api/v3/newagent/ endpoint. The agentid parameter accepts up to 255 characters and is improperly sanitized...

5.4AI score0.00028EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-4487

Malware in sbrugna...

6.8CVSS6.4AI score0.00098EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-5445

Malware in sbrugna...

5CVSS6.4AI score0.00417EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-1886

Malware in sbrugna...

2.1CVSS6.4AI score0.00282EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-3423

Malware in sbrugna...

4.9CVSS6.4AI score0.00509EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-4061

Malware in sbrugna...

7.5CVSS6.4AI score0.01045EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-5990

Malware in sbrugna...

7.5CVSS6.4AI score0.00889EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.20 views

EUVD-2015-3424

Malware in sbrugna...

4CVSS6.4AI score0.00251EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-5166

Malicious code in bioql PyPI...

5.3CVSS5.8AI score0.00537EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2025/05/22 11:21 a.m.4 views

CVE-2013-1887

Multiple cross-site scripting XSS vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields...

2.1CVSS5.6AI score0.00282EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:45 a.m.5 views

CVE-2010-4519

Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...

6.8CVSS7.7AI score0.00098EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:45 a.m.6 views

CVE-2010-4520

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

4.3CVSS6AI score0.00231EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:4 p.m.3 views

CVE-2009-2076

Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...

3.5CVSS5.5AI score0.00156EPSS
Exploits1References1
CNVD
CNVD
added 2024/11/15 12:0 a.m.7 views

Google Chrome Security Bypass Vulnerability (CNVD-2025-00212)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from the Views module containing a mal-implementation issue. An attacker could exploit the vulnerability to bypass security restrictions...

8.3CVSS6.3AI score0.0048EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.2 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from the Views module containing a mal-implementation issue. An attacker could exploit the vulnerability to bypass security restrictions...

8.3CVSS6.6AI score0.0048EPSS
Exploits1References5
VulnCheck KEV
VulnCheck KEV
added 2022/01/26 12:0 a.m.1 views

VulnCheck KEV: CVE-2013-0322

Cross-site scripting XSS vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field...

4.3CVSS6AI score0.00365EPSS
Exploits0References1
Rows per page
Query Builder