Lucene search
K

133 matches found

EUVD
EUVD
added 2026/01/06 4:1 p.m.1 views

EUVD-2026-1006

Lack of output escaping leads to a XSS vector in the pagebreak plugin...

8.4CVSS5.7AI score0.00003EPSS
Exploits0References2
Circl
Circl
added 2025/11/13 5:0 a.m.1 views

CVE-2025-43445

creationtimestamp| type| source ---|---|--- 2025-11-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1006/...

4.3CVSS6.2AI score0.00053EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2013-1006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and...

9.3CVSS5.8AI score0.01305EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:18 p.m.5 views

CVE-2022-1006

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the id parameter when editing Calendars, which could allow high privilege users such as admin to perform SQL injection attacks...

7.2CVSS7.6AI score0.0062EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:50 p.m.5 views

CVE-2020-1006

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017...

7.8CVSS7AI score0.00397EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2025-1006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app...

8.8CVSS7.7AI score0.00578EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/02/25 12:0 a.m.9 views

Microsoft Edge (Chromium-Based) < 133.0.3065.82 Multiple Vulnerabilities (Feb 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS8.8AI score0.00872EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/02/24 12:0 a.m.10 views

Fedora: Security Advisory (FEDORA-2025-c0c371a0b6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.00872EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2025/02/21 8:0 a.m.14 views

Chromium: CVE-2025-1006 Use after free in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00578EPSS
Exploits0
FreeBSD
FreeBSD
added 2025/02/20 12:0 a.m.16 views

qt6-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 11 security bugs in Chromium: CVE-2024-11477: 7-Zip Zstd decompression integer underflow CVE-2025-0762: Use after free in DevTools CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0998: Out of bounds memory access in V8...

9.8CVSS8.5AI score0.44229EPSS
Exploits2References1
Circl
Circl
added 2025/02/19 6:6 p.m.5 views

CVE-2025-1006

creationtimestamp| type| source ---|---|--- 2025-02-19 18:06:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likej75iku2y 2025-02-19 20:24:56+00:00| seen| https://t.me/cvedetector/18454 2025-02-19 21:48:35+00:00| seen|...

8.8CVSS7.6AI score0.00578EPSS
Exploits0References4
OSV
OSV
added 2025/02/19 5:15 p.m.11 views

CVE-2025-1006

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...

8.8CVSS9.2AI score
Exploits0References2
Cvelist
Cvelist
added 2025/02/19 4:55 p.m.12 views

CVE-2025-1006

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...

0.00578EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2025/02/19 4:55 p.m.5 views

CVE-2025-1006

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. Chromium security severity: Medium...

8.8CVSS7.2AI score0.00578EPSS
Exploits0
CVE
CVE
added 2025/02/19 4:55 p.m.92 views

CVE-2025-1006

CVE-2025-1006 is a Chrome/Chromium vulnerability: a use-after-free in the Network component could allow a remote attacker to trigger heap corruption via a crafted web app. Affects Google Chrome (Chromium-based) before version 133.0.6943.126. Impact is described as high (CVSS 3.1 base score 8.8; A...

8.8CVSS9.1AI score0.00578EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2025/02/19 12:0 a.m.13 views

Google Chrome Security Update (stable-channel-update-for-desktop_18-2025-02) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS8.7AI score0.00872EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/05/07 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2024:1006-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.0025EPSS
Exploits2References5
Circl
Circl
added 2024/01/29 5:31 p.m.1 views

CVE-2024-1006

creationtimestamp| type| source ---|---|--- 2024-01-29 17:31:54+00:00| seen| https://t.me/ctinow/175408 2024-02-21 10:41:19+00:00| seen| https://t.me/ctinow/189443...

7.5CVSS6.3AI score0.00072EPSS
Exploits0References2
CVE
CVE
added 2024/01/29 3:31 p.m.34 views

CVE-2024-1006

The CVE-2024-1006 issue affects Shanxi Diankeyun Technology NODERP (up to 6.0.2), specifically the Cookie Handler component in application/index/common.php. The vulnerability arises from manipulation of Nod_User_Id/Nod_User_Token, leading to improper authentication. It is exploitable over the net...

7.5CVSS5.4AI score0.00072EPSS
Exploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.2 views

Malicious code in wlwz-2312-1006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b509ea474da1876443dc1070c94d3c07f6c7f56f82a0c03383d154d124fc4e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Rows per page
Query Builder