CVE-2026-3941 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3941 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3941

An insufficient policy enforcement flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=474670215...

3rd-party-cpu-abuser (>=1.0.0, <=1.4.0), @2lkit/devtools (0.0.1-0) +170 more potentially affected by CVE-2026-3941 via chrome-devtools-frontend (>=1.0.377119-1, <=1.0.1555430)

chrome-devtools-frontend NPM version =1.0.377119-1, =1.0.0, =1.2.2-beta, =0.12.1, =0.1.0, =0.1.0, =0.0.1, =1.0.2, =1.0.0, =2.0.0 and more Source cves: CVE-2026-3941 Source advisory: SNYK:JS-CHROMEDEVTOOLSFRONTEND-15467463...

Linux Distros Unpatched Vulnerability : CVE-2026-3941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HT...

CVE-2026-3941

Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-3941

Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-3941

Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-3941

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in goalthemes Vango vango allows PHP Local File Inclusion.This issue affects Vango: from n/a through = 1.3.3...

ECHO-3941-2D33-1F31 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

CVE-2023-3941

Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system with root privileges. This issue affects ZkTeco-based OEM devices ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others with the ZAM170-NF-1.8.25-7354-Ver1.0.0...

CVE-2022-3941

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

CVE-2025-3941

creationtimestamp| type| source ---|---|--- 2025-05-22 15:19:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprg3v6rr42s...

CVE-2025-3941

The vulnerability CVE-2025-3941 affects Tridium Niagara Framework and Niagara Enterprise Security on Windows, arising from improper handling of Windows DATA Alternate Data Streams. The issue allows input data manipulation and is listed as affecting Niagara Framework versions before 4.14.2, before...

CVE-2025-3941 Improper Handling of Windows: DATA Alternate Data Stream

Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise...

CVE-2024-3941

creationtimestamp| type| source ---|---|--- 2025-03-28 19:29:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9440...

Linux Distros Unpatched Vulnerability : CVE-2021-3941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImfChromaticities.cpp routine RGBtoXYZ, there are some division operations such as float Z = 1 - chroma.white.x - chroma.white.y Y / chroma.white.y; and...

Debian: Security Advisory (DLA-3941-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws

An analysis of a hybrid biometric access system from Chinese manufacturer ZKTeco has uncovered two dozen security flaws that could be used by attackers to defeat authentication, steal biometric data, and even deploy malicious backdoors. "By adding random user data to the database or using a fake ...

CVE-2023-3941

creationtimestamp| type| source ---|---|--- 2024-06-12 15:10:04+00:00| published-proof-of-concept| https://t.me/BlackHat0Hackers/52 2024-06-12 18:41:36+00:00| published-proof-of-concept| https://t.me/ZeroEthicalCourse/441 2024-07-17 13:08:30+00:00| seen| https://t.me/androidMalware/2248...