24 matches found
MINI-5CMR-9886-6254
Bulletin has no description...
CVE-2026-9886 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9886 vulnerabilities
Vulnerabilities for packages: chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-9886
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
DEBIAN-CVE-2026-9886
Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-9886
CVE-2026-9886 affects Google Chrome on macOS with versions prior to 148.0.7778.216. It is a use‑after‑free in the Chromium Base component that could allow a remote attacker to escape the browser sandbox via a crafted HTML page. The Chrome update 148.0.7778.216 (and related 148.0.7778.215/216 on o...
CGA-QJ4C-9VP3-9886
Bulletin has no description...
CVE-2025-9886
creationtimestamp| type| source ---|---|--- 2025-10-04 04:03:58+00:00| seen| Telegram/vKXbUCTmoHsM-Eyjweqcv2Etqe8CqhWghXUituiH8b1uak...
WordPress Trinity Audio plugin <= 5.20.2 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Moose Love in WordPress Plugin Trinity Audio versions = 5.20.2...
MAL-2025-9886 Malicious code in @zalastax/nolb-_compai_fi (npm)
The package @zalastax/nolb-compaifi was found to contain malicious code...
CVE-2024-9886
creationtimestamp| type| source ---|---|--- 2024-10-30 04:59:42+00:00| seen| https://t.me/cvedetector/9391...
CVE-2024-9886 WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidumap' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-9886 WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidumap' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2019-9886
Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...
CVE-2019-9886
Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...
CVE-2019-9886 eClass platform allows user to download arbitrary files without authentication
Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...
CVE-2019-9886
CVE-2019-9886 affects BroadLearning eClass up to version ip.2.5.10.2.1, where arbitrary files can be downloaded without authentication via URLs containing download_attachment.php under templates or home folders. Root cause/impact: unauthenticated access to sensitive files (no login required). Pub...
CVE-2017-9886
IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 is affected by FPX parsing vulnerabilities that can be triggered by a specially crafted .fpx file, potentially allowing arbitrary code execution or denial of service. The public details consistently attribute the issue to Data from Faulting Address and...