77839 matches found
EUVD-2026-69721
WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...
PT-2026-84653
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The reset password.html page parses query string parameters and uses the url parameter as a redirection target via window.location = url following a password...
PT-2026-84661
In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories...
CVE-2024-35585
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...
PT-2026-84846
Name of the Vulnerable Software and Affected Versions HTTPX2 versions prior to 2.11.0 Description The Request. prepare function in src/httpx2/httpx2/ models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header. This occurs...
PT-2026-84852
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for...
go-fdo-client security update
1.0.0-7 - Rebuild go-fdo-client against updated golang 1.0.0-6 - Rebuild go-fdo-client against updated golang 1.0.0-5 - Rebuild against updated golang...
SpiderSapien: Client-Centric Web Crawler and Security Scanner
Black-box web application crawling and scanning play an important role for security testing of web applications. Yet state-of-the-art scanners fall short of addressing key characteristics of a modern web application: its extreme dynamism and interactivity on the client side. This paper identifies...
ALSA-2026:62577 Important: go-fdo-client security update
go-fdo-client is the device-side implementation of FIDO Device Onboard specification in Go. It provides an FDO client that interacts with FDO manufacturer and owner servers to perform device on-boarding. Security Fixes: crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to...
CVE-2026-84841: Client-Side Enforcement of Server-Side Security
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for...
PT-2026-90709
Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get request token Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smart require Net::OAuth versions before...
GuestView Component Compromise Data Compromise
The vulnerability in the GuestView component of Google Chrome and Microsoft Edge is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Network Component Compromise Data Compromise
The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Google Chrome Microsoft Edge Data Compromise
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Google Chrome Microsoft Edge Data Compromise
The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to the implementation of security features on the client side. Exploitation of this vulnerability enables a remote attacker to affect data integrity by using a specially crafted HTML page...
Bluetooth Component DoS
The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Actor Component Data Compromise
The vulnerability in the Actor component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Bluetooth Component DoS
The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability in the Serial component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...
Google Chrome Microsoft Edge Data Compromise
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability could allow a remote attacker to compromise data integrity...