CVE-2024-13378: Improper Neutralization of Input During Web Page Generation

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘stylesettings’ parameter in versions 2.9.0.1 up to, and including, 2.9.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

Microsoft Edge 访问控制错误漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an elevation of privilege vulnerability, which can be exploited by attackers to access sensitive user data when visiting specially crafted...

CVE-2025-0057: Unrestricted Upload of File with Dangerous Type

SAP NetWeaver AS JAVA User Admin Application is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo with malicious JS content. When a victim visits the vulnerable component, the attacker can read and modify information within the scope of...

USN-7201-1: WebKitGTK vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

[SECURITY] Fedora 40 Update: chromium-131.0.6778.264-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 41 Update: chromium-131.0.6778.264-1.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

CVE-2024-10815 PostLists <= 2.0.2 - Reflected XSS

The PostLists WordPress plugin through 2.0.2 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

[SECURITY] Fedora 40 Update: firefox-134.0-1.fc40

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

USN-7191-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2025-0237, CVE-2025-0239,...

[SECURITY] Fedora 41 Update: firefox-134.0-1.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

JVN#57428125: PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting

MZK-DP300N, wireless LAN router provided by PLANEX COMMUNICATIONS INC., contains a cross-site scripting vulnerability CWE-79. Impact If an attacker logs in to the affected product and manipulates the device settings, an arbitrary script may be executed on the logged-in user's web browser when...

[SECURITY] Fedora 40 Update: chromium-131.0.6778.139-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 41 Update: chromium-131.0.6778.139-1.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

CVE-2024-52857

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

[SECURITY] Fedora 40 Update: chromium-131.0.6778.108-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

Mozilla Firefox: Multiple Vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

CVE-2024-6515

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

CVE-2024-6515

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

CVE-2024-6515

Summary: CVE-2024-6515 affects ABB ASPECT – Enterprise v3.08.02, NEXUS Series v3.08.02, and MATRIX Series v3.08.02. The issue involves the web browser interface potentially manipulating usernames/passwords in clear text or Base64, increasing the risk of credential exposure. Connected sources also...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2024-48568)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which stems from the fact that under certain circumstances, navigating to a web page can result in a missing address in the location URL bar. No...