CVE-2026-18019 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-18019

creationtimestamp| type| source ---|---|--- 2026-07-30 05:46:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 11:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-18019

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18019

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18019

Technical details for CVE-2026-18019 are not publicly available in the provided documents. Monitor for updates.

Linux Distros Unpatched Vulnerability : CVE-2026-18019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-18019

SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...

CVE-2017-18019

creationtimestamp| type| source ---|---|--- 2023-12-03 01:04:19+00:00| seen| https://t.me/arpsyndicate/909...

CVE-2020-18019

CVE-2020-18019: Xinhu OA System v1.8.3 contains an SQL injection in the typeid parameter of the createfolderAjax function (mode_worcAction.php). The root cause is unvalidated input allowing arbitrary commands to be injected, leading to unauthorized access to sensitive information. Reported impact...

CVE-2018-18019

Summary (CVE-2018-18019) : The Tribulant Slideshow Gallery WordPress plugin is affected up to version 1.6.8. The vulnerability is a cross-site scripting (XSS) flaw caused by parameter handling in the admin flow: Slide[title], Slide[media_file], or Slide[image_url] passed through wp-admin/admin.ph...

CVE-2018-18019

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slidetitle, Slidemediafile, or Slideimageurl parameter...

CVE-2017-18019

Summary (CVE-2017-18019): K7 Total Security versions prior to 15.1.0.305 are affected by an input sanitization flaw in the K7Sentry device. User-controlled input can be used to compare an arbitrary memory address with a fixed value, enabling reading of arbitrary memory contents, and the product c...

K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read

K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read Vulnerability Summary The following advisory describes an Crash found in K7 Total Security. Credit An independent security researcher, Kyriakos Economou aka @kyREcon, has reported this vulnerability to Beyond Security’s SecuriTeam...

K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read

Vulnerability Summary The following advisory describes an Crash found in K7 Total Security. Credit An independent security researcher, Kyriakos Economou aka @kyREcon, has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor response K7 has released patches ...