https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:20:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00967 bdu:2016-00967 https://cve.radiocsirt.org/vuln/bdu:2016-00967 https://cve.radiocsirt.org/vuln/certfr-2015-avi-535 certfr-2015-avi-535 https://cve.radiocsirt.org/vuln/certfr-2015-avi-535 https://cve.radiocsirt.org/vuln/cnvd-2015-08389 cnvd-2015-08389 https://cve.radiocsirt.org/vuln/cnvd-2015-08389 https://cve.radiocsirt.org/vuln/euvd-2026-94490 EUVD-2026-94490 https://cve.radiocsirt.org/vuln/euvd-2026-94490 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6790 <p>The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.</p> <p>The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-6790 https://cve.radiocsirt.org/vuln/ghsa-j459-hg6r-rr22 <p>The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.</p> <p>The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.</p> https://cve.radiocsirt.org/vuln/ghsa-j459-hg6r-rr22 https://cve.radiocsirt.org/vuln/gsd-2015-6790 gsd-2015-6790 https://cve.radiocsirt.org/vuln/gsd-2015-6790 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10171-1 <p>chromedriver-55.0.2883.75-3.1 on GA media</p> <p>chromedriver-55.0.2883.75-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10171-1 https://cve.radiocsirt.org/vuln/rhsa-2015:2618 <p>chromium-browser: Type confusion in extensions chromium-browser: Use-after free in Blink chromium-browser: Escaping issue in saved pages chromium-browser: Various fixes from internal audits, fuzzing and other initiatives v8: multiple vulnerabilities fixed in 4.7.80.23</p> <p>chromium-browser: Type confusion in extensions chromium-browser: Use-after free in Blink chromium-browser: Escaping issue in saved pages chromium-browser: Various fixes from internal audits, fuzzing and other initiatives v8: multiple vulnerabilities fixed in 4.7.80.23</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2618 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6790 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt</p> <p>The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt</p> <p>The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6790