CVE-2026-7342 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-7342 vulnerabilities

Vulnerabilities for packages: chromium...

DEBIAN-CVE-2026-7342

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-7342

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-05-08 11:02:36+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mldler5zzw2j...

RockyLinux 10 : kea (RLSA-2026:7342)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:7342 advisory. Kea: Kea: Denial of Service via maliciously crafted message CVE-2026-3608 Tenable has extracted the preceding description block directly from the RockyLinux...

CVE-2025-7342

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

CVE-2025-7342

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

CVE-2025-7342 VM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

CVE-2024-7342

A vulnerability was found in Baidu UEditor 1.4.3.3. It has been classified as problematic. This affects an unknown part of the file /ueditor/php/controller.php?action=uploadfile=utf-8. The manipulation of the argument upfile leads to unrestricted upload. It is possible to initiate the attack...

CVE-2024-7342

creationtimestamp| type| source ---|---|--- 2024-08-01 07:53:51+00:00| seen| https://t.me/cvedetector/2210...

GHSA-J6C3-3C4W-QV8P Moodle cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by 1 providing a crafted playerId or 2 referencing a...

CVE-2015-7342

creationtimestamp| type| source ---|---|--- 2020-03-09 19:43:25+00:00| seen| https://t.me/cibsecurity/10382...

CVE-2015-7342

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...

CVE-2015-7342

CVE-2015-7342 affects the JNews Joomla Component prior to 8.5.0. It allows SQL injection via multiple vectors: upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. The available connected documents confirm the affected product and inputs, but do not provide...

CVE-2017-7342

creationtimestamp| type| source ---|---|--- 2019-03-26 01:32:10+00:00| seen| https://t.me/cibsecurity/3343...

CVE-2017-7342

A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button...

CVE-2017-7342

CVE-2017-7342 relates to Fortinet FortiPortal. Affected product: FortiPortal versions 4.0.0 and earlier. Root cause: a weak password recovery process that can allow an attacker to execute unauthorized code or commands via a hidden Close button. Impact: as per NVD, high/severe potential with remot...

CVE-2019-7342

ZoneMinder ≤ 1.32.3 is affected by a Cross-Site Scripting (XSS) vulnerability in the view filter (filter.php). The issue stems from improper filtration of the filter[AutoExecuteCmd] parameter, allowing an attacker to inject HTML or JavaScript. Impact is attacker-controlled code execution in the b...

CVE-2019-7342

POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterAutoExecuteCmd' parameter value in the view filter filter.php because proper filtration is omitted...

CVE-2019-7342

POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterAutoExecuteCmd' parameter value in the view filter filter.php because proper filtration is omitted...