Lucene search
K

99 matches found

ATTACKERKB
ATTACKERKB
added 2026/06/04 11:5 p.m.7 views

CVE-2026-11225

Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. Chromium security severity: Low...

5.8AI score0.00158EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.10 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of the WebUI. This vulnerability could allow remote attackers to perform domain name spoofing through a speciall...

6.5CVSS5.4AI score0.00158EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.11 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of the Cronet component in the Android version. This vulnerability could allow remote attackers to perform domai...

6.5CVSS5.4AI score0.00158EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2026/05/25 2:5 p.m.19 views

CVE-2026-9078

Firefox for iOS displayed specially crafted right-to-left RTL and internationalized domain names IDNs incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This...

5.4CVSS5.8AI score0.00199EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.10 views

Mozilla Firefox for iOS 安全漏洞

Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox for iOS prior to version 151.1, which stems from the incorrect display of specially crafted right-to-left domain names and internationalized...

5.4CVSS5.7AI score0.00199EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/05/22 4:16 p.m.13 views

CVE-2026-39821

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

9.6CVSS5.8AI score0.00478EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2026/04/08 10:16 p.m.6 views

CVE-2026-5895

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name. Chromium security severity: Low...

5.4CVSS5.8AI score0.00158EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/17 12:0 a.m.6 views

EulerOS Virtualization 2.12.1 : avahi (EulerOS-SA-2026-1416)

According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where...

5.3CVSS7.2AI score0.00681EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/16 12:0 a.m.13 views

EulerOS 2.0 SP10 : avahi (EulerOS-SA-2026-1301)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after...

5.3CVSS5.9AI score0.00681EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/16 12:0 a.m.6 views

EulerOS 2.0 SP10 : avahi (EulerOS-SA-2026-1327)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after...

5.3CVSS7.2AI score0.00681EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

SUSE SLES16 Security Update : avahi (SUSE-SU-2026:20027-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:20027-1 advisory. - CVE-2024-52615: Fixed DNS spoofing bsc1233421 Tenable has extracted the preceding description block directly from the SUSE security...

5.3CVSS6.7AI score0.00574EPSS
Exploits0References4
OSV
OSV
added 2026/01/11 4:54 p.m.2 views

SUSE-SU-2026:20070-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing bsc1233421...

5.3CVSS7.1AI score0.00574EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/15 8:28 p.m.5 views

CVE-2023-53875 GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to run a reverse shell with SMB server...

7.5CVSS8.2AI score0.00379EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.6 views

Gomlab GOM Player 安全漏洞

Gomlab GOM Player is a multimedia player software from the Korean company Gomlab. A security vulnerability exists in Gomlab GOM Player version 2.3.90.5360, which originates from a remote code execution vulnerability in the Internet Explorer component that could lead to the execution of arbitrary...

8.8CVSS8AI score0.00379EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.6 views

EulerOS 2.0 SP11 : avahi (EulerOS-SA-2025-2473)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS...

5.3CVSS6.6AI score0.00681EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.7 views

EulerOS 2.0 SP13 : avahi (EulerOS-SA-2025-2514)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS...

5.3CVSS6.6AI score0.00681EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-0238

Malware in sbrugna...

5CVSS6.1AI score0.01634EPSS
Exploits1References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2005-0237

Malware in sbrugna...

5CVSS6.4AI score0.01004EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-16907

Malware in sbrugna...

5.3CVSS7.3AI score0.01471EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-2802

Malware in sbrugna...

4CVSS6.1AI score0.0124EPSS
Exploits1References74
Rows per page
Query Builder