Поиск уязвимостей
Количество 34
Количество 34
BDU:2026-15306
Уязвимость пакета golang-x-net языка программирования Golang, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код
ROS-20261106-80-0030
Уязвимость alloy
ALT-PU-2026-9801
ALT-PU-2026-9801: package `mimir` update to version 3.1.1-alt1
CVE-2026-42506
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVE-2026-42506
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVE-2026-42506
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
CVE-2026-42506
Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
CVE-2026-42506
Parsing arbitrary HTML which is then rendered using Render can result ...
ROS-20260908-80-0039
Уязвимость golang-x-net
ROS-20260908-73-0033
Уязвимость golang-x-net
GHSA-cg87-vwwh-xvgj
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
openSUSE-SU-2026:20984-1
Security update for grafana
openSUSE-SU-2026:21262-1
Security update for hauler
openSUSE-SU-2026:20963-1
Security update for neonmodem
SUSE-SU-2026:2285-1
Security update for yq
openSUSE-SU-2026:21367-1
Security update for lux
openSUSE-SU-2026:20892-1
Security update for yq
SUSE-SU-2026:3630-1
Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6
openSUSE-SU-2026:21281-1
Security update for cosign
SUSE-SU-2026:2827-1
Security update for cosign
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-15306 Уязвимость пакета golang-x-net языка программирования Golang, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | ROS-20261106-80-0030 Уязвимость alloy | CVSS3: 6.1 | 0% Низкий | 7 дней назад |
| ALT-PU-2026-9801 ALT-PU-2026-9801: package `mimir` update to version 3.1.1-alt1 | CVSS3: 9.6 | 5 месяцев назад | |
 | CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-42506 Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-42506 Parsing arbitrary HTML which is then rendered using Render can result ... | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| ROS-20260908-80-0039 Уязвимость golang-x-net | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-73-0033 Уязвимость golang-x-net | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| GHSA-cg87-vwwh-xvgj Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
 | openSUSE-SU-2026:20984-1 Security update for grafana | 5 месяцев назад | ||
| openSUSE-SU-2026:21262-1 Security update for hauler | 4 месяца назад | ||
| openSUSE-SU-2026:20963-1 Security update for neonmodem | 5 месяцев назад | ||
| SUSE-SU-2026:2285-1 Security update for yq | 5 месяцев назад | ||
| openSUSE-SU-2026:21367-1 Security update for lux | 4 месяца назад | ||
| openSUSE-SU-2026:20892-1 Security update for yq | 5 месяцев назад | ||
| SUSE-SU-2026:3630-1 Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6 | 3 месяца назад | ||
| openSUSE-SU-2026:21281-1 Security update for cosign | 4 месяца назад | ||
| SUSE-SU-2026:2827-1 Security update for cosign | 4 месяца назад |
Уязвимостей на страницу