CVE-2021-37518

Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.

• CWE-79
• CWE-79

• https://github.com/philc/vimium/issues/3832Exploit, Third Party Advisory
• https://github.com/philc/vimium/pull/3850Third Party Advisory
• https://github.com/philc/vimium/issues/3832Exploit, Third Party Advisory
• https://github.com/philc/vimium/pull/3850Third Party Advisory

Published

Feb 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37500Directory traversal vulnerability in Reprise License Manager…8.1
• CVE-2021-37501Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0…7.5
• CVE-2021-37502Cross Site Scripting (XSS) vulnerability in automad 1.7.5 al…5.4
• CVE-2021-37504A cross-site scripting (XSS) vulnerability in the fileNameSt…6.1
• CVE-2021-3751libmobi is vulnerable to Out-of-bounds Write9.8
• CVE-2021-37517An Access Control vulnerability exists in Dolibarr ERP/CRM 1…7.5
• CVE-2021-37519Buffer Overflow vulnerability in authfile.c memcached 1.6.9 …5.5
• CVE-2021-3752A use-after-free flaw was found in the Linux kernel’s Blueto…7.1
• CVE-2021-37522SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 all…9.8
• CVE-2021-37524Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26…6.1
• CVE-2021-37529A double-free vulnerability exists in fig2dev through 3.28a …5.5
• CVE-2021-3753A race problem was seen in the vt_k_ioctl in drivers/tty/vt/…4.7