23676 matches found
CVE-2026-45647
CVE-2026-45647 describes a time-of-check time-of-use (TOCTOU) race condition in Microsoft Defender for Endpoint (Mac) that can allow an authorized locally logged-in attacker to elevate privileges. The Red Hat, NVD, MSRC and CVE records consistently frame the issue as a local elevation of privileg...
CVE-2026-48271 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser...
CVE-2026-45462
creationtimestamp| type| source ---|---|--- 2026-06-09 16:04:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review...
CVE-2026-45457
creationtimestamp| type| source ---|---|--- 2026-06-09 11:04:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0182 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review...
CVE-2026-8499
creationtimestamp| type| source ---|---|--- 2026-06-09 07:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnto3pp7i72m 2026-06-11 15:16:16+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnzjfhayk42t...
CVE-2026-36719
An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information, including SHA256 password hashes, via enumerating user IDs...
CVE-2025-55651
Removed by vendor...
BELL-CVE-2026-50263
Bulletin has no description...
CVE-2026-10908
creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...
CVE-2026-11102
CVE-2026-11102 affects Google Chrome’s Isolated Web Apps in Chromium-based builds, where an inappropriate implementation allowed a remote attacker to run arbitrary code inside a sandbox via a malicious file. The vulnerability is tied to Chrome/Chromium prior to version 149.0.7827.53. The impact i...
CVE-2026-11059
Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CGA-83RM-P3MQ-9RJQ
Bulletin has no description...
CVE-2025-59606 NULL Pointer Dereference in HLOS
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization...
CVE-2026-10249 itsourcecode Online Blood Bank Management System viewrequest.php sql injection
A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0. Impacted is an unknown function of the file /admin/viewrequest.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might...
CVE-2026-10199
creationtimestamp| type| source ---|---|--- 2026-06-01 03:09:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn745jn5v22y...
CGA-48V3-W78C-4FPM
Bulletin has no description...
CVE-2026-45633
creationtimestamp| type| source ---|---|--- 2026-05-29 20:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzefsabjs2g 2026-05-30 04:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn262srnhk26...
CGA-8PHV-2PW2-F647
Bulletin has no description...