22 matches found
CVE-2026-11302 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11302
creationtimestamp| type| source ---|---|--- 2026-06-05 02:54:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj55gfvnf2h 2026-06-05 13:24:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...
CVE-2026-11302
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...
Linux Distros Unpatched Vulnerability : CVE-2026-11302
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access contro...
CVE-2021-37415
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication...
CVE-2024-11302 Missing check_access in lollms_binding_infos in parisneo/lollms
A missing checkaccess function in the lollmsbindinginfos module of the parisneo/lollms repository, version V14, allows attackers to add, modify, and remove bindings arbitrarily. This vulnerability affects the /installbinding and /reinstallbinding endpoints, among others, enabling unauthorized...
CVE-2024-11302
The CVE-2024-11302 entry concerns parisneo/lollms, specifically the lollms_binding_infos module in version V14. A missing check_access() allows an attacker to add, modify, and remove bindings via endpoints such as /install_binding and /reinstall_binding, enabling unauthorized access to binding se...
Adobe InDesign 12.0.0 < 13.0.0 Remote Code Execution (APSB17-38) (macOS)
The version of Adobe InDesign installed on the remote macOS host is prior to 13.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB17-38 advisory. - An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exist...
CVE-2020-11302
CVE-2020-11302 entry is rejected/not used and does not represent an active vulnerability entry.
VulnCheck KEV: CVE-2021-37415
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication...
CVE-2021-37415
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication...
PT-2021-7237
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus versions prior to 11302 Description The issue is related to the implementation of the REST API interface in Zoho ManageEngine ServiceDesk Plus, specifically concerning weaknesses in the authentication...
CVE-2019-11302
CVE-2019-11302 is rejected and not an active vulnerability entry.
Design/Logic Flaw
This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
CVE-2020-17398
CVE-2020-17398 affects Parallels Desktop (notably 15.1.4) through the prl_hypervisor kernel extension. The issue is an out-of-bounds read caused by insufficient validation of user-supplied data, enabling local attackers who can run low-privilege code to disclose information and, in combination wi...
CVE-2018-11302
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to potential array overflow in WLAN...
CVE-2018-11302
CVE-2018-11302 corresponds to a WLAN buffer overflow issue described in Qualcomm CAF Android variants (Android for MSM, Firefox OS for MSM, QRD Android) where input from userspace could be copied into a kernel buffer without proper validation. The CVE is listed under the Qualcomm component mappin...
CVE-2017-11302
CVE-2017-11302 affects Adobe InDesign 12.1.0 and earlier on Windows/macOS, due to an exploitable memory corruption vulnerability that could allow arbitrary code execution. The referenced APSB17-38 advisory states an update fixes the issue; patch to InDesign 13.0.0 or later (critical, CVSS 3.x/10....