CVE-2026-10022 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10022 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-10022

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513289241...

Linux Distros Unpatched Vulnerability : CVE-2026-10022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary cod...

CVE-2011-10022 SPlayer 3.7 Content-Type Header Buffer Overflow

SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. The vulnerability occurs due to improper bounds checking on the header value, allowing an attacker to overwrite the Structured Exception...

CVE-2012-10022

Kloxo versions 6.1.12 and earlier contain two setuid root binaries—lxsuexec and lxrestart—that allow local privilege escalation from uid 48. The lxsuexec binary performs a uid check and permits execution of arbitrary commands as root if the invoking user matches uid 48. This flaw enables attacker...

CVE-2013-10022

A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the function cntctfrmdisplayform/cntctfrmcheckform of the file contactform.php. The manipulation leads to cross site scripting. The attack may be...

CVE-2024-10022

creationtimestamp| type| source ---|---|--- 2024-10-16 14:41:30+00:00| seen| https://t.me/cvedetector/8049...

CVE-2024-10022 code-projects Pharmacy Management System manage_supplier.php sql injection

A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managesupplier.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2013-10022

creationtimestamp| type| source ---|---|--- 2023-04-05 16:26:13+00:00| seen| https://t.me/cibsecurity/61453...

CVE-2013-10022

CVE-2013-10022 details (mode C): A cross-site scripting vulnerability exists in the BestWebSoft Contact Form Plugin for WordPress, specifically in the functions cntctfrm_display_form/cntctfrm_check_form within contact_form.php. The issue affects version 3.51 and can be triggered remotely. A fix i...

MSC-2023-10022

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2015-10022

A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/customimport.pl. The manipulation leads to sql injection. The identifier of the patch is 8bdb6fcf7209584eaf1232437f0f53e735b2b34c. It is...

CVE-2015-10022

CVE-2015-10022 affects IISH nlgis2, targeting the unknown functionality in the file scripts/etl/custom_import.pl . The vulnerability allows an attack that leads to SQL injection . A patch is identified by the patch hash 8bdb6fcf7209584eaf1232437f0f53e735b2b34c and a vulnerability identifier VDB-2...

CVE-2015-10022 IISH nlgis2 custom_import.pl sql injection

A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/customimport.pl. The manipulation leads to sql injection. The identifier of the patch is 8bdb6fcf7209584eaf1232437f0f53e735b2b34c. It is...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2022-10022)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-10022 advisory. 5.15.0-4.70.5.2 - Revert 'sched: Remove the limitation of WFONCPU on wakelist if wakee cpu is idle' Samasth Norway Ananda Orabug: 34783367 5.15.0-4.70.5.1 ...

CVE-2020-10022

CVE-2020-10022 affects Zephyr OS (zephyrproject-rtos) via a malformed JSON payload received from an UpdateHub server, causing memory corruption. This leads to either denial of service or potential code execution in Zephyr versions 2.1.0 and later (including 2.2.0+). Root cause described across co...

CVE-2020-10022 UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array

A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later...

CVE-2011-10022

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/splayercontenttype.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:52:21+00:00| seen|...

CVE-2017-10022

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Operations. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...