18 matches found
CVE-2022-40126
This repository does not have a README...
ROOT-OS-DEBIAN-13-CVE-2025-40126 CVE-2025-40126 in linux - Patched by Root
Root has patched CVE-2025-40126 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-40126 CVE-2025-40126 in linux - Patched by Root
Root has patched CVE-2025-40126 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2026-40126
creationtimestamp| type| source ---|---|--- 2026-08-17 12:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-40126 2026-08-17 13:36:59+00:00| seen| https://bsky.app/profile/threadlinqs.bsky.social/post/3mtbt3uh33k2t 2026-08-18 11:39:38+00:00| seen|...
CVE-2026-40126
OutSystems Service Center is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can exploit it by uploading a file whose filename contains malicious JavaScript code . The flaw exists in all locations within Service Center where a file can be attached and p...
CVE-2026-40126 DOM-based Cross-Site Scripting in OutSystems Service Center
OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting XSS attack that can be exploited by a low-privileged attacker via the upload of a file with a malicious filename containing JavaScript code. The vulnerability exists in all locations where a file can be attached and...
CVE-2026-40126 DOM-based Cross-Site Scripting in OutSystems Service Center
OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting XSS attack that can be exploited by a low-privileged attacker via the upload of a file with a malicious filename containing JavaScript code. The vulnerability exists in all locations where a file can be attached and...
CVE-2025-40126
creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...
BELL-CVE-2025-40126
Bulletin has no description...
CVE-2025-40126
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copyfromtouser for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copyfromuser and copytouser. These handlers return from the respectiv...
CVE-2025-40126
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copyfromtouser for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copyfromuser and copytouser. These handlers return from the respectiv...
MAL-2025-40126 Malicious code in yak-waterfall-qpn898-project (npm)
The package yak-waterfall-qpn898-project was found to contain malicious code...
CVE-2022-40126
creationtimestamp| type| source ---|---|--- 2022-09-29 16:35:04+00:00| seen| https://t.me/cibsecurity/50727 2026-07-29 12:01:00+00:00| seen| https://t.me/CVEhub/2917 2026-07-30 00:01:38+00:00| seen| https://t.me/CVEhub/2917 2026-08-01 02:00:04+00:00| published-proof-of-concept|...
CVE-2022-40126
A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated...
CVE-2022-40126
A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated...
CVE-2022-40126
CVE-2022-40126 describes a misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 that allows privilege escalation and arbitrary command execution when Service Mode is activated. Public sources consistently identify the affected software as Clash for Windows and the v...
CVE-2021-40126
Cisco Umbrella exposes an email-enumeration vulnerability in its web-based dashboard. An authenticated, remote attacker could attempt to modify a user’s email address and trigger an overly descriptive error message when the new address already exists, allowing enumeration of existing email addres...
Google Chrome Denial of Service Vulnerability (CNVD-2019-40126)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the 'WebKit::WebPluginContainerImpl::handleEvent' function in Google Chrome. An attacker can exploit this vulnerability to cause a denial of service crash with the help of the htmlpluginelement.cpp...