CVE-2026-8520 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-8520

A race flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503619813...

CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-8520

creationtimestamp| type| source ---|---|--- 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260515...

EUVD-2019-8520

Malware in sbrugna...

CVE-2024-8520

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the admininit or...

CVE-2019-8520

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to read restricted memory...

CVE-2024-8520

creationtimestamp| type| source ---|---|--- 2024-10-04 07:40:27+00:00| seen| https://t.me/cvedetector/6958...

CVE-2024-8520

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the admininit or...

CVE-2024-8520 Ultimate Member <= 2.8.6 - Cross-Site Request Forgery to Membership Status Change

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the admininit or...

CVE-2024-8520

CVE-2024-8520 concerns the WordPress plugin Ultimate Member (versions ≤ 2.8.6). The vulnerability is a Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on admin_init or user_action_hook, enabling unauthenticated attackers to change a user’s membership status by trick...

WordPress Ultimate Member Plugin <= 2.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ultimate Member Type Plugin Vulnerable versions = 2.8.6 Fixed in 2.8.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8520 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7e0506c6b50a Credits Jack Taylor Required...

Phpzag SQL Injection (CVE-2020-8519; CVE-2020-8520; CVE-2020-8521)

An SQL injection vulnerability exists in Phpzag. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-8520

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

CVE-2020-8520

CVE-2020-8520 describes an SQL injection in the Records.php file used by Phpzag Live DataTables (and related SpryMedia DataTables implementations) where the vulnerable code handles the order and column parameters. The underlying flaw permits crafting statements via these parameters, enabling mani...

CVE-2019-8520

CVE-2019-8520 is an out-of-bounds read vulnerability in macOS that was addressed by improved bounds checking. The issue could allow a malicious application to read restricted memory and is fixed in macOS Mojave 10.14.4 (Security Update). The available sources consistently describe the fix as part...

Rockwell Automation 8520-MDDN

Binary data 753794.prm...

Rockwell Automation 8520-MTBD

Binary data 753793.prm...

CVE-2016-8520

CVE-2016-8520 affects HPE Helion Eucalyptus (v4.3.0 and earlier). The root cause is improper IAM permission checks when accessing versioned S3 objects and ACLs, enabling in some cases authenticated users with S3 permissions to access versioned data. The NVD entry documents a network-vector, low c...