Lucene search
K

48 matches found

Microsoft CVE
Microsoft CVE
•added 2026/05/01 7:16 a.m.•2 views

Chromium: CVE-2026-7340 Integer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.3AI score0.00207EPSS
Exploits0
SUSE CVE
SUSE CVE
•added 2026/04/30 2:29 a.m.•3 views

SUSE CVE-2026-7340

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00207EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/29 12:0 a.m.•1 views

Linux Distros Unpatched Vulnerability : CVE-2026-7340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HT...

4.3CVSS5.9AI score0.00207EPSS
Exploits0References2
OSV
OSV
•added 2026/04/28 11:16 p.m.•3 views

DEBIAN-CVE-2026-7340

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00207EPSS
Exploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/28 10:36 p.m.•2 views

CVE-2026-7340

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

5.4AI score0.00207EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
•added 2026/04/28 10:36 p.m.•1 views

CVE-2026-7340

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

5.4AI score0.00207EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2026/04/28 10:36 p.m.•2 views

CVE-2026-7340

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00207EPSS
Exploits0
ATTACKERKB
ATTACKERKB
•added 2026/03/27 3:52 p.m.•3 views

CVE-2023-7340

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the...

5.3CVSS6AI score0.00317EPSS
Exploits1References3Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:34 a.m.•5 views

CVE-2019-7340

POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterQueryterms0val' parameter value in the view filter filter.php because proper filtration is omitted...

6.1CVSS6AI score0.00873EPSS
Exploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•2 views

EUVD-2017-9779

Malware in sbrugna...

7.5CVSS7.5AI score0.00413EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:0 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2019-7340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable...

6.1CVSS7AI score0.00873EPSS
Exploits1References2
NVD
NVD
•added 2025/07/15 5:15 a.m.•12 views

CVE-2025-7340

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the tempfileupload function in all versions up to, and including, 2.2.1. This makes it possible for...

9.8CVSS0.0161EPSS
Exploits2References3
Vulnrichment
Vulnrichment
•added 2025/07/15 4:23 a.m.•8 views

CVE-2025-7340 HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the tempfileupload function in all versions up to, and including, 2.2.1. This makes it possible for...

9.8CVSS6.7AI score0.0161EPSS
Exploits2References3
Circl
Circl
•added 2025/07/15 3:0 a.m.•1 views

CVE-2025-7340

creationtimestamp| type| source ---|---|--- 2025-07-15 03:00:05+00:00| published-proof-of-concept| Telegram/hGK5FcDNylh4RCIfn73xm0ZtZkhj8XnRr-h94Lf4hKlBbzg 2025-07-15 07:00:11+00:00| published-proof-of-concept| Telegram/RbO8HOpVHK90gpne9sqXUdFcGv84T1I4a-t3fo6sMJ1-Pgs 2025-07-19 13:34:53+00:00|...

9.8CVSS5.1AI score0.0161EPSS
Exploits2References1
GithubExploit
GithubExploit
•added 2025/07/14 11:27 p.m.•508 views

Exploit for Unrestricted Upload of File with Dangerous Type in Hasthemes Download_Contact_Form_7_Widget_For_Elementor_Page_Builder_\&_Gutenberg_Blocks

🚨 HT Contact Form Widget to execute system commands. āœ… Exam...

9.8CVSS6.8AI score0.0161EPSS
Exploits2
Patchstack
Patchstack
•added 2025/07/14 9:14 p.m.•10 views

WordPress HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin <= 2.2.1 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by vgo0 in WordPress Plugin HT Contact Form 7 versions = 2.2.1...

9.8CVSS6.9AI score0.0161EPSS
Exploits2References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:28 p.m.•5 views

CVE-2018-7340

Duo Network Gateway 1.2.9 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authenticatio...

7.7CVSS7AI score0.0096EPSS
Exploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 11:43 a.m.•14 views

CVE-2024-7340

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin...

8.8CVSS7AI score0.05015EPSS
Exploits0References1
The Hacker News
The Hacker News
•added 2024/11/11 10:11 a.m.•12 views

Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

Cybersecurity researchers have uncovered nearly two dozen security flaws spanning 15 different machine learning ML related open-source projects. These comprise vulnerabilities discovered both on the server- and client-side, software supply chain security firm JFrog said in an analysis published...

8.8CVSS10AI score0.14956EPSS
Exploits3
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:0 a.m.•21 views

CentOS 7 : php-pear (RHSA-2022:7340)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:7340 advisory. - ArchiveTar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. CVE-2020-28948 - ArchiveTar through...

7.8CVSS7.6AI score0.84673EPSS
Exploits5References4
Rows per page
Query Builder