CVE-2026-11032 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11032

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11032

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-11032

creationtimestamp| type| source ---|---|--- 2025-09-26 19:50:49+00:00| seen| https://gist.github.com/Darkcrai86/dd056f729b0994516b9971ca6d553470...

Linux Distros Unpatched Vulnerability : CVE-2020-11032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. Th...

CVE-2024-11032

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

CVE-2016-11032

An issue was discovered on Samsung mobile devices with M6.0 software. An attacker can disable all Sound functionality by broadcasting an unprotected intent. The Samsung IDs are SVE-2016-7179 and SVE-2016-7182 November 2016...

CVE-2020-11032

In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6...

CVE-2020-11032

GLPI has a SQL injection vulnerability (CVE-2020-11032) affecting all helpdesk instances in versions prior to 9.4.6. Exploitation requires a technician account. The issue is fixed in GLPI 9.4.6; upgrading to that version is the stated remediation. The CVE details are supported by multiple sources...

CVE-2020-11032 SQL injection on addme_observer and addme_assign in GLPI

In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6...

CVE-2016-11032

CVE-2016-11032 affects Samsung mobile devices running Android 6.0 (Marshmallow); an input-validation error allows an unprotected broadcast intent to disable all Sound functionality. The issue is described across multiple sources (e.g., RH and CNVD) as enabling attackers to silence device audio vi...

CVE-2018-20320

CVE-2018-20320 is rejected/not used and does not represent an active vulnerability entry.

CVE-2019-11032

CVE-2019-11032 affects EasyToRecruit (E2R) prior to 2.11, where the upload feature and Candidate Profile Management allow Cross Site Scripting (XSS) in multiple locations. The provided documents confirm an XSS type vulnerability with the described components, but do not specify exploit details, a...

CVE-2018-11032

PHPRAP 1.0.4–1.0.8 contains a SQL Injection vulnerability in the search() function of application/home/controller/project.php. All sources consistently describe an input-driven SQL injection in the project search path, enabling arbitrary SQL execution via malicious input. The affected component i...

CVE-2017-11032

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a double free can occur when kmalloc fails to allocate memory for pointers resp/req in the service-locator driver function servicelocatorsendmsg...

CVE-2017-11032

The CVE-2017-11032 issue affects Android builds using CAF Linux kernels (Android MSM/CAF variants). It describes a double-free in the service_locator_send_msg() path when kmalloc fails to allocate memory for resp/req pointers, potentially enabling local privilege elevation. Affected components ar...

HP OpenView OmniBack II Command Execution

No description provided by source. $Id: openviewomnibackexec.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

HP OpenView OmniBack II Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP OpenView...

HP OpenView OmniBack II Command Execution

This module uses a vulnerability in the OpenView Omniback II service to execute arbitrary commands. This vulnerability was discovered by DiGiT and his code was used as the basis for this module. For Microsoft Windows targets, due to module limitations, use the "unix/cmd/generic" payload and set C...