27 matches found
DEBIAN-CVE-2026-9914
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-9914
creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-29...
CVE-2025-9914
creationtimestamp| type| source ---|---|--- 2025-10-06 07:06:05+00:00| seen| Telegram/c90cwUKugi6-85BBOZ1h752KP7wWRvvii4d9SWNF7EzrZak...
CVE-2025-9914
The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application...
MAL-2025-9914 Malicious code in @zalastax/nolb-_deva (npm)
The package @zalastax/nolb-deva was found to contain malicious code...
CVE-2020-9914
An input validation issue existed in Bluetooth. This issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An attacker in a privileged network position may be able to perform denial of service attack using malformed Bluetooth packets...
CVE-2024-9914
A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizardSelectMode of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The...
CVE-2024-9914
creationtimestamp| type| source ---|---|--- 2024-10-13 20:35:57+00:00| seen| https://t.me/cvedetector/7787...
CVE-2024-9914 D-Link DIR-619L B1 formSetWizardSelectMode buffer overflow
A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizardSelectMode of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The...
CVE-2024-9914 D-Link DIR-619L B1 formSetWizardSelectMode buffer overflow
A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizardSelectMode of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The...
CVE-2024-9914
CVE-2024-9914 affects the D-Link DIR-619L B1 firmware 2.06. The vulnerability is in the function formSetWizardSelectMode under /goform/formSetWizardSelectMode; manipulating the curTime argument causes a buffer overflow. Exploitation can be remote, and public exploits have been disclosed. Current ...
CVE-2020-9914
CVE-2020-9914: An input validation issue in Bluetooth in Apple platforms allowed a privileged-network attacker to potentially cause a denial of service via malformed Bluetooth packets. Affected: Apple ecosystem (iOS/iPadOS, tvOS) prior to the fixes. Mitigation: update to iOS 13.6 / iPadOS 13.6 an...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1536)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-9914
The CVE-2019-9914 entry documents a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin YOP Poll, version
[SECURITY] [DLA 1497-1] qemu security update
Package : qemu Version : 1:2.1+dfsg-12+deb8u7 CVE ID : CVE-2015-8666 CVE-2016-2198 CVE-2016-6833 CVE-2016-6835 CVE-2016-8576 CVE-2016-8667 CVE-2016-8669 CVE-2016-9602 CVE-2016-9603 CVE-2016-9776 CVE-2016-9907 CVE-2016-9911 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 CVE-2016-9921 CVE-2016-9922...
CVE-2017-9914
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .bie file, related to a "Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b."...
CVE-2017-9914
CVE-2017-9914 affects XnView Classic for Windows (v2.40). The vulnerability allows remote code execution via a specially crafted .bie file, tied to a Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b. This entry indicates a potentially high-impact result (code executio...
CVE-2017-9914
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .bie file, related to a "Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b."...
Ubuntu 17.04 : qemu vulnerabilities (USN-3268-1)
Zhenhao Hong discovered that QEMU incorrectly handled the Virtio GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2016-10028 It was discovered that QEMU incorrectly handled the JAZZ RC4030 device. A privileged attacker...
CVE-2014-9914
Race condition in the ip4datagramreleasecb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service use-after-free by leveraging incorrect expectations about locking during multithreaded access to internal data structures...