openSUSE 16 Security Update : chromium (openSUSE-SU-2026:20372-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20372-1 advisory. Changes in chromium: - Chromium 146.0.7680.80: CVE-2026-3909: Out of bounds write in Skia boo1259659 - Chromium 146.0.7680.75 released 2026-03-1...

CVE-2026-3920 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3920 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3920

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 21:50:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgveyeox232k 2026-03-16 00:00:00+00:00|...

Linux Distros Unpatched Vulnerability : CVE-2026-3920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

CVE-2026-3920

Google Chrome and Microsoft Edge are vulnerable to out-of-bounds memory access within the WebML component . A remote attacker can exploit this vulnerability via a crafted HTML page to trigger heap corruption or cause a service failure . The issue affects versions of Google Chrome prior to 146.0.7...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 146 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 146.0.7680.71 Linux 146.0.7680.71/72 Windows/Mac contains a number of fixes and improvements -- a list of changes is availab...

PT-2026-24868

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.71 Description An out-of-bounds memory access issue exists in WebML within Google Chrome. This flaw could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTM...

EUVD-2026-3920

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Edge-Themes Eldon eldon allows PHP Local File Inclusion.This issue affects Eldon: from n/a through = 1.0...

MiracleLinux 8 : git-lfs-2.13.3-3.el8 (AXSA:2022-3920:02)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-3920:02 advisory. golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension CVE-2020-28851 golang.org/x/text: Panic in...

Linux Distros Unpatched Vulnerability : CVE-2022-3920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the U...

Linux Distros Unpatched Vulnerability : CVE-2023-3920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions...

CVE-2025-3920

creationtimestamp| type| source ---|---|--- 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:56+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81...

CVE-2025-3920

A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These credentials correspond to a built-in administrative account of the software. An attacker with local access to the system or the application's installation directory could extra...

CVE-2025-3920 Hard-coded Password in SUR-FBD CMMS

A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These credentials correspond to a built-in administrative account of the software. An attacker with local access to the system or the application's installation directory could extra...

CVE-2021-3920

grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2022-3920

creationtimestamp| type| source ---|---|--- 2025-04-29 20:12:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13908...

CVE-2024-3920

The Flattr WordPress plugin through 1.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-3920

The Flattr WordPress plugin (versions

WordPress Flattr Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Flattr Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3920 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7b3c04a81031 Credits Bob Matyas Required privilege...