7428 matches found
[SECURITY] Fedora 41 Update: firefox-136.0-2.fc41
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Linux Distros Unpatched Vulnerability : CVE-2010-3770
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11,...
[SECURITY] Fedora 40 Update: chromium-133.0.6943.141-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 40 Update: chromium-133.0.6943.126-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 40 Update: chromium-133.0.6943.98-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 40 Update: chromium-133.0.6943.53-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
编号撤回
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by out-of-bounds memory access in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...
CVE-2025-0054
SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be later executed in the victim's web...
[SECURITY] Fedora 40 Update: firefox-135.0-1.fc40
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CVE-2024-38318 IBM Aspera Shares HTML injection
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
CVE-2024-6515
Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...
[SECURITY] Fedora 40 Update: chromium-132.0.6834.159-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-132.0.6834.110-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2024-13378
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘stylesettings’ parameter in versions 2.9.0.1 up to, and including, 2.9.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
Microsoft Edge 访问控制错误漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an elevation of privilege vulnerability, which can be exploited by attackers to access sensitive user data when visiting specially crafted...
USN-7201-1: WebKitGTK vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...
[SECURITY] Fedora 40 Update: chromium-131.0.6778.264-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-131.0.6778.264-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2024-10815 PostLists <= 2.0.2 - Reflected XSS
The PostLists WordPress plugin through 2.0.2 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...