CVE-2026-11071 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11071 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11071

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-11071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially...

CVE-2026-11071

Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2019-11071

SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because varmemotri is mishandled...

EUVD-2020-0410

Malware in sbrugna...

CVE-2024-11071

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solutionversions described below which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery CSRF attack, which probabilistically enables JSON Hijacking aka JavaScript...

CVE-2024-11071

creationtimestamp| type| source ---|---|--- 2025-04-07 07:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm7g64cshh2z 2025-04-07 07:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295578822521194 2025-04-07 11:12:44+00:00| seen|...

CVE-2024-11071 Improper Access Control In DestinyECM

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solutionversions described below which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery CSRF attack, which probabilistically enables JSON Hijacking aka JavaScript...

CVE-2024-11071

CVE-2024-11071 concerns DestinyECM by Cyberdigm. The issue is a Permissive Cross-domain Policy with Untrusted Domains in the local API server, which may allow Cross-Site Request Forgery (CSRF) and probabilistically enable JSON Hijacking via forged pages. The base description notes version differe...

CVE-2024-11071 Improper Access Control In DestinyECM

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solutionversions described below which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery CSRF attack, which probabilistically enables JSON Hijacking aka JavaScript...

CVE-2020-11071

SLPJS npm package slpjs before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting...

CVE-2017-11071

This CVE entry is rejected and not used.

CVE-2016-11071

creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:37+00:00| seen| https://t.me/cibsecurity/12948...

CVE-2016-11071

Mattermost Server (before 3.1.0) is vulnerable to XSS via missing noreferrer and noopener link-rel protection. The root cause is failure to apply proper link relationship attributes, enabling malicious scripts when users click crafted links. Remediation: upgrade github.com/mattermost/mattermost-s...

Input validation

In SLP Validate npm package slp-validate before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. Th...

CVE-2020-11072 False-negative validation results in MINT transactions with invalid baton

In SLP Validate npm package slp-validate before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. Th...

bch-wallet-plugin-postoffice (>=1.0.0, <=1.0.8), bitcoin-wallet-api (>=0.0.5, <=0.1.6) potentially affected by CVE-2020-11071 via slpjs (>=0.22.5, <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-11071 Source advisory: OSV:GHSA-JC83-CPF9-Q7C6...

CVE-2020-11071

CVE-2020-11071 concerns the SLPJS npm package (slpjs) prior to version 0.27.2, describing a vulnerability in which false‑negative validation outcomes for MINT transaction operations could permit spending of affected tokens, potentially destroying a user’s minting baton. The issue is fixed in vers...