7424 matches found
[SECURITY] Fedora 40 Update: chromium-133.0.6943.98-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 40 Update: chromium-133.0.6943.53-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
编号撤回
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by out-of-bounds memory access in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...
CVE-2025-0054
SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be later executed in the victim's web...
[SECURITY] Fedora 40 Update: firefox-135.0-1.fc40
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CVE-2024-38318 IBM Aspera Shares HTML injection
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
CVE-2024-6515
Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...
[SECURITY] Fedora 40 Update: chromium-132.0.6834.159-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-132.0.6834.110-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2024-13378
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘stylesettings’ parameter in versions 2.9.0.1 up to, and including, 2.9.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
Microsoft Edge 访问控制错误漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an elevation of privilege vulnerability, which can be exploited by attackers to access sensitive user data when visiting specially crafted...
USN-7201-1: WebKitGTK vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...
[SECURITY] Fedora 40 Update: chromium-131.0.6778.264-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-131.0.6778.264-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2024-10815 PostLists <= 2.0.2 - Reflected XSS
The PostLists WordPress plugin through 2.0.2 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
[SECURITY] Fedora 40 Update: firefox-134.0-1.fc40
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
USN-7191-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2025-0237, CVE-2025-0239,...
[SECURITY] Fedora 41 Update: firefox-134.0-1.fc41
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
JVN#57428125: PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting
MZK-DP300N, wireless LAN router provided by PLANEX COMMUNICATIONS INC., contains a cross-site scripting vulnerability CWE-79. Impact If an attacker logs in to the affected product and manipulates the device settings, an arbitrary script may be executed on the logged-in user's web browser when...