Lucene search
+L

171980 matches found

CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•27 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of untrusted inputs in the SiteIsolation component. It was possible for remote...

4.3CVSS5.7AI score0.00252EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•28 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a security vulnerability. This vulnerability stemmed from insufficient GPU policy execution, which could allow remote attackers to exploit the system through specially crafted HTML...

8.3CVSS6.1AI score0.00304EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•27 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a security vulnerability, which was caused by improper implementations in the ANGLE component. This vulnerability could allow remote attackers who have breached the rendering proces...

3.1CVSS5.8AI score0.002EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•25 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from the reuse of Core objects after its release, which could allow remote attackers to exploit the vulnerability...

8.3CVSS6.1AI score0.00304EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•22 views

HPE Aruba Networking Wireless Operating System 安全漏洞

HPE Aruba Networking Wireless Operating System is a wireless network operating system developed by the American company HPE. There are security vulnerabilities in the HPE Aruba Networking Wireless Operating System. These vulnerabilities stem from command injection in the command-line interface...

8.8CVSS6.1AI score0.01417EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•33 views

Hewlett Packard Enterprise ArubaOS 命令注入漏洞

Hewlett Packard Enterprise ArubaOS is a network wireless operating system developed by Hewlett Packard Enterprise. Hewlett Packard Enterprise ArubaOS has a command injection vulnerability, which stems from a flaw in the command-line interface. This vulnerability could allow authenticated remote...

7.2CVSS5.9AI score0.00957EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/05/12 12:00 a.m.•22 views

Containous Traefik StripPrefixRegex Access Information Disclosure

The vulnerability of the intermediate software program StripPrefixRegex of the Containous Traefik reverse proxy server is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

8.5CVSS8.5AI score0.0072EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/12 12:00 a.m.•20 views

Business Chat Function Microsoft 365 Copilot Unauthorized Access

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS6.4AI score0.01027EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/05/12 12:00 a.m.•18 views

Business Chat Function Disclosure Protected Information

The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to incorrect elimination of special elements in output data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

7.8CVSS6.4AI score0.01027EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/05/12 12:00 a.m.•12 views

PIXSO Multi-functional Online Image Editor Access Control

The vulnerability of the multi-functional online image editor in PIXSO’s UI/UX design is related to access control errors. Exploiting this vulnerability could allow an attacker to create threats to data integrity remotely...

5.5CVSS5.7AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2026/05/11 6:16 p.m.•21 views

CVE-2026-4893

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information...

5.3CVSS0.00578EPSS
SaveExploits2References6
osv_alpine
osv_alpine
•added 2026/05/11 6:16 p.m.•24 views

ALPINE-CVE-2026-4890

A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet...

7.5CVSS7.5AI score0.01068EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/05/11 4:48 p.m.•15 views

CVE-2026-4893

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information...

5.3CVSS6.9AI score0.00578EPSS
SaveExploits2
attackerkb
attackerkb
•added 2026/05/11 4:48 p.m.•15 views

CVE-2026-4893

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information...

5.3CVSS6.9AI score0.00578EPSS
SaveExploits2References8
osv_cve
osv_cve
•added 2026/05/11 4:48 p.m.•14 views

CVE-2026-4893 CVE-2026-4893

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information...

5.3CVSS6AI score
SaveExploits0References8
AlpineLinux
AlpineLinux
•added 2026/05/11 4:48 p.m.•29 views

CVE-2026-4893

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information...

5.3CVSS6.9AI score0.00578EPSS
SaveExploits2
CVE
CVE
•added 2026/05/11 4:47 p.m.•83 views

CVE-2026-4891

The dnsmasq service is vulnerable to a heap-based out-of-bounds read within its DNSSEC validation logic. This flaw is triggered by an RRSIG rdlen underflow , which allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted DNS packet. Affected versions include thos...

7.5CVSS7.4AI score0.00836EPSS
SaveExploits0References14
osv_cve
osv_cve
•added 2026/05/11 4:47 p.m.•18 views

CVE-2026-4891 CVE-2026-4891

A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet...

5.3CVSS6AI score
SaveExploits0References16
Cvelist
Cvelist
•added 2026/05/11 4:47 p.m.•81 views

CVE-2026-4890 CVE-2026-4890

A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet...

0.01068EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2026/05/11 4:47 p.m.•34 views

CVE-2026-4890

A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet...

7.5CVSS7.5AI score0.01068EPSS
SaveExploits0
Rows per page
Query Builder