Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
CVE-2026-115897
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
#microsoft
共收录 2274 条相关情报。
← 返回所有主题serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
CVE-2026-115754
serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names
CVE-2026-116137
adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names
Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
CVE-2026-115484
Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning
CVE-2026-115486
Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning
Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio
CVE-2026-115485
Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio
Drivers: hv: Don't reset VMBus connection state on error/exit paths
CVE-2026-99216
Drivers: hv: Don't reset VMBus connection state on error/exit paths
power: supply: core: prevent unregistering a power supply while a callback runs
CVE-2026-99215
power: supply: core: prevent unregistering a power supply while a callback runs
vsock: treat TCP_CLOSING as once-established
CVE-2026-99213
vsock: treat TCP_CLOSING as once-established
net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
CVE-2026-99212
net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
netlink: reset skb headers before unicast and multicast filtering
CVE-2026-99211
netlink: reset skb headers before unicast and multicast filtering
scsi: target: iscsi: Fix race in discovery auth updates
CVE-2026-99206
scsi: target: iscsi: Fix race in discovery auth updates
ocfs2/dlm: Protect the recovery list during debugfs reads
CVE-2026-99204
ocfs2/dlm: Protect the recovery list during debugfs reads
pipe: preserve existing fasync readers on writer setup failure
CVE-2026-99203
pipe: preserve existing fasync readers on writer setup failure
netlink: avoid hashing the network namespace pointer
CVE-2026-99201
netlink: avoid hashing the network namespace pointer
net: bcmgenet: unshare the skb before writing the control block
CVE-2026-99192
net: bcmgenet: unshare the skb before writing the control block
calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
CVE-2026-99191
calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
gpio: mxc: fix race between chained IRQ handler install and probe completion
CVE-2026-99189
gpio: mxc: fix race between chained IRQ handler install and probe completion
perf: Fix perf_pmu_migrate_context() leaving events behind
CVE-2026-99187
perf: Fix perf_pmu_migrate_context() leaving events behind
ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture
CVE-2026-99182
ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture