Lucene search
+L

3698 matches found

Nuclei
Nuclei
added yesterday59 views

WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting

WordPress Accessibility Helper plugin before 0.6.0.7 contains a cross-site scripting vulnerability. It does not sanitize and escape the wahi parameter before outputting back its base64 decode value in the page. id: CVE-2022-0150 info: name: WordPress Accessibility Helper 0.6.0.7 - Cross-Site...

6.1CVSS5.9AI score0.01718EPSS
SaveExploits2References4
OSV
OSV
added 3 days ago6 views

CVE-2026-14304

In Eclipse Accessibility Tools Framework ACTF versions up to 1.6.0 including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0, it has been identified that an XML External Entity XXE vulnerability exists. If this vulnerability is exploited, a malicious...

4.6CVSS5.4AI score
SaveExploits0References6
CVE
CVE
added 3 days ago27 views

CVE-2026-14304

The CVE describes an XML External Entity (XXE) vulnerability in Eclipse ACTF up to version 1.6.0 (including ACTF-based miChecker up to 3.1.0). The underlying issue allows an attacker to access local or internal network resources via applications that use Eclipse ACTF (e.g., miChecker). Affected c...

4.6CVSS5.4AI score0.00146EPSS
SaveExploits0References4
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-53300

In Eclipse Accessibility Tools Framework ACTF versions up to 1.6.0 including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0, it has been identified that an XML External Entity XXE vulnerability exists. If this vulnerability is exploited, a malicious...

4.6CVSS5.4AI score0.00146EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/31 12:33 a.m.8 views

SUSE CVE-2026-17713

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.6AI score0.00369EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:0 a.m.7 views

The vulnerability of the drm_compat_ioctl() function in the drivers/gpu/drm/drm_ioc32.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...

7CVSS5.5AI score0.00123EPSS
SaveExploits0References13Affected Software3
RedhatCVE
RedhatCVE
added 2026/07/30 11:15 p.m.7 views

CVE-2026-17713

An insufficient validation of untrusted input flaw was found in the Accessibility component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520572766...

9.6CVSS5.8AI score0.00369EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/30 1:16 a.m.4 views

DEBIAN-CVE-2026-17713

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/30 1:16 a.m.4 views

CVE-2026-17713

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS0.00369EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/30 12:19 a.m.50 views

CVE-2026-17713

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

0.00369EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/30 12:19 a.m.62 views

CVE-2026-17713

CVE-2026-17713 affects Google Chrome on Android before version 151.0.7922.72, due to insufficient validation of untrusted input in Accessibility. A compromised renderer process could potentially escape the sandbox via a crafted HTML page. The issue is categorized as High severity with a critical ...

9.6CVSS5.9AI score0.00369EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/30 12:19 a.m.5 views

EUVD-2026-50839

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00369EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/07/30 12:19 a.m.6 views

CVE-2026-17713

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.9AI score0.00369EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-17713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the...

9.6CVSS5.6AI score0.00369EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/28 12:56 p.m.5 views

CVE-2026-13806

An insufficient validation of untrusted input flaw was found in the Accessibility component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503333798...

8.7CVSS5.8AI score0.0031EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/07/28 12:0 a.m.4 views

The vulnerability in the `drivers/dma/xilinx/xdma.c` driver of the Linux operating system’s DMA core allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the drivers/dma/xilinx/xdma.c driver of the Linux operating system’s DMA core is related to errors in calculating the data buffer size. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

8.8CVSS6AI score0.00168EPSS
SaveExploits0References9Affected Software2
Apple
Apple
added 2026/07/27 12:0 a.m.21 views

About the security content of iOS 26.6 and iPadOS 26.6

About the security content of iOS 26.6 and iPadOS 26.6 This document describes the security content of iOS 26.6 and iPadOS 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

9.8CVSS7.7AI score0.00462EPSS
SaveExploits2References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/24 12:0 a.m.25 views

The vulnerability of the Oracle WebLogic Server application server’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Oracle WebLogic Server application server’s kernel is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information using the SAML protoc...

9.9CVSS7.1AI score0.00486EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2026/07/23 11:17 a.m.11 views

CVE-2026-24537

CVE-2026-24537 — Unauthenticated Cross Site Request Forgery (CSRF) in the WordPress plugin WP Accessibility Helper (WAH) , versions

4.3CVSS5.3AI score0.00107EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/23 11:17 a.m.7 views

EUVD-2026-48143

Unauthenticated Cross Site Request Forgery CSRF in WP Accessibility Helper WAH = 0.6.6 versions...

4.3CVSS5.3AI score0.00107EPSS
SaveExploits0References1
Rows per page
Query Builder