CVE-2026-10015 vulnerabilities

Vulnerabilities for packages: chromium...

Chromium: CVE-2026-10015 Integer overflow in WTF

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Linux Distros Unpatched Vulnerability : CVE-2026-10015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

CVE-2010-10015 AOL <= 9.5 Phobos.Playlist 'Import()' Stack-Based Buffer Overflow

AOL versions up to and including 9.5 includes an ActiveX control Phobos.dll that exposes a method called Import via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string argument. Exploitation allows remote attacke...

CVE-2020-10015

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-10015

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...

CVE-2013-10015

A vulnerability has been found in fanzila WebFinance 0.5 and classified as critical. This vulnerability affects unknown code of the file htdocs/admin/saveContractSignerRole.php. The manipulation of the argument n/v leads to sql injection. The patch is identified as...

CVE-2012-10015

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttrsettingspage of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch...

CVE-2024-10015

creationtimestamp| type| source ---|---|--- 2024-11-16 03:25:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113490494092824143 2024-11-18 16:58:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9071...

CVE-2024-10015 ConvertCalculator for WordPress <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and type Parameter

The ConvertCalculator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'type' parameters in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2012-10015

CVE-2012-10015 affects the BestWebSoft Twitter Plugin for WordPress (versions up to 2.14). Affected is the function twttr_settings_page in twitter.php of the Settings Page component, where a cross-site request forgery (CSRF) vulnerability exists. The issue can be triggered remotely; upgrading to ...

CVE-2012-10015 BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttrsettingspage of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch...

CVE-2013-10015

creationtimestamp| type| source ---|---|--- 2023-02-03 22:21:00+00:00| seen| https://t.me/cibsecurity/57509...

CVE-2013-10015

CVE-2013-10015 affects fanzila WebFinance 0.5. The vulnerability resides in the file htdocs/admin/save_Contract_Signer_Role.php, where manipulation of the argument n/v leads to SQL injection. A patch is available (commit: abad81af614a9ceef3f29ab22ca6bae517619e06) and should be applied to remediat...

CVE-2015-10015

creationtimestamp| type| source ---|---|--- 2023-01-05 18:22:16+00:00| seen| https://t.me/cibsecurity/55972...

CVE-2015-10015 glidernet ogn-live sql injection

A vulnerability, which was classified as critical, has been found in glidernet ogn-live. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named bc0f19965f760587645583b7624d66a260946e01. It is recommended to apply a patch to fix this issue. The...

CVE-2020-10015

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-10015

CVE-2020-10015 is an out-of-bounds write vulnerability that, if exploited, could allow an attacker to execute arbitrary code with kernel privileges on affected Apple macOS versions. The NVD entry states the issue is addressed by improved bounds checking and is fixed in macOS Big Sur 11.1, Securit...

CVE-2019-10015

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...

CVE-2019-10015

CVE-2019-10015 affects baigoStudio baigoSSO v3.0.1. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying payload in the first form field of the configuration screen, where the code is written to BG_SITE_NAME in opt_base.inc.php. This results in remote code executio...