Filtered by vendor Cert/cc Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-35466 1 Cert/cc 1 Cveclient/cveinterface.js 2026-04-03 N/A
XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services
CVE-2026-35467 1 Cert/cc 1 Cveclient/encrypt-storage.js 2026-04-03 N/A
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.