17 matches found
CVE-2026-11309 vulnerabilities
Vulnerabilities for packages: chromium...
Chromium: CVE-2026-11309 Insufficient policy enforcement in History
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Linux Distros Unpatched Vulnerability : CVE-2026-11309
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page...
CVE-2026-11309
The History component in Google Chrome and Microsoft Edge (via Chromium) is vulnerable to insufficient policy enforcement due to a lack of mechanisms for verifying data sources. A remote attacker can exploit this by using a crafted HTML page to perform UI spoofing and compromise data integrity . ...
CVE-2026-11309
Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2020-11309
Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearable...
CVE-2024-11309
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...
CVE-2024-11309
creationtimestamp| type| source ---|---|--- 2024-11-18 06:14:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113502485348586580 2024-11-18 08:11:04+00:00| seen| https://t.me/cvedetector/11290...
CVE-2024-11309 TRCore DVC - Arbitrary File Read through Path Traversal
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...
CVE-2020-11309
Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearable...
CVE-2019-11309
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2018-11309
CVE-2018-11309 affects the WordPress MemberMouse plugin up to version 2.2.8 (and earlier). The vulnerability is a blind SQL injection in the coupon_code parameter triggered via the applyCoupon action in admin-ajax.php, allowing an unauthenticated attacker to dump the WordPress MySQL database. Con...
CVE-2017-11309
Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response...
CVE-2017-11309
Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response...
CVE-2017-11309
Summary of CVE-2017-11309 details : The issue is a buffer overflow in the SoftConsole client of Avaya IP Office prior to 10.1.1. A long response from a remote server can trigger the overflow, allowing arbitrary code execution on affected systems. The vulnerability affects the SoftConsole client c...
Avaya OfficeScan (IPO) SoftConsole Remote SEH Buffer Overflow Exploit
Exploit for windows platform in category remote exploits + Credits: John Page aka hyp3rlinx Vendor: ============= www.avaya.com Product: =========== Avaya IP Office IPO v9.1.0 - 10.1 IP Office is Avaya's global midsize solution for enterprises, supporting up to 3,000 users at a single location wi...