Lucene search
+L

8576 matches found

Positive Technologies
Positive Technologies
added 2026/05/19 12:0 a.m.25 views

PT-2026-41868

The AddressRepository::getSqlQuery method constructs a database query without properly sanitizing user input, leading to SQL Injection. The method is not invoked anywhere within the extension itself and therefore poses no direct risk in a default installation. However, custom extensions that call...

8.2CVSS5.8AI score0.00328EPSS
SaveExploits0References2
AlmaLinux
AlmaLinux
added 2026/05/19 12:0 a.m.18 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43213 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari...

8.8CVSS6.7AI score0.00961EPSS
SaveExploits2References38
Tenable Nessus
Tenable Nessus
added 2026/05/18 12:0 a.m.22 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2026-021471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021471 advisory. If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are...

7.5CVSS7.5AI score0.01599EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/16 3:25 p.m.13 views

EUVD-2020-31228

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Attackers can intercept upload requests to the logoupload parameter in the admin interface and rename files to...

8.8CVSS6.3AI score0.00541EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/05/16 1:14 a.m.13 views

SUSE CVE-2026-8587

Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00175EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2026/05/16 12:21 a.m.24 views

Chromium: CVE-2026-8587 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS5.8AI score0.00175EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/05/16 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-42266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the...

8.8CVSS6.6AI score0.00554EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/16 12:0 a.m.68 views

Microsoft Edge (Chromium) < 148.0.3967.70 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 148.0.3967.70. It is, therefore, affected by multiple vulnerabilities as referenced in the May 15, 2026 advisory. - Microsoft Edge Chromium-based Remote Code Execution Vulnerability CVE-2026-45495 - Improper input...

9.8CVSS7.4AI score0.00987EPSS
SaveExploits0References165
CVE
CVE
added 2026/05/15 6:36 p.m.29 views

CVE-2021-47964

Schlix CMS 2.2.6-6 is affected by a remote code execution flaw in core.blockmanager. An authenticated attacker can upload a crafted ZIP containing PHP in packageinfo.inc and trigger execution by accessing the About tab of the installed extension, enabling arbitrary PHP execution with high impact ...

8.8CVSS6.6AI score0.0071EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/15 6:36 p.m.12 views

CVE-2021-47964 Schlix CMS 2.2.6-6 Remote Code Execution via core.blockmanager

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages through the block manager. Attackers can upload a crafted ZIP file containing PHP code in the packageinfo.inc file and...

8.8CVSS6.6AI score0.0071EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/15 8:42 a.m.9 views

BIT-JUPYTERLAB-2026-42266 JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

8.8CVSS5.8AI score0.00554EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/05/15 8:2 a.m.13 views

CVE-2026-8587

An use after free flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507356235...

9.6CVSS5.7AI score0.00175EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/15 1:58 a.m.14 views

SUSE CVE-2026-42266

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

8.8CVSS5.8AI score0.00554EPSS
SaveExploits0References3
Redos
Redos
added 2026/05/15 12:0 a.m.13 views

ROS-20260515-73-0045

A vulnerability in the Extensions component of the Google Chrome browser is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to spoof the user interface...

4.3CVSS5.8AI score0.00123EPSS
SaveExploits0
NVD
NVD
added 2026/05/14 8:17 p.m.13 views

CVE-2026-8587

Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Chromium security severity: Medium...

8.8CVSS0.00175EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/14 8:17 p.m.17 views

CVE-2026-8565

Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

4.7CVSS0.00134EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/05/14 8:17 p.m.16 views

CVE-2026-8587

Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00175EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/05/14 7:52 p.m.33 views

CVE-2026-8587

Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00175EPSS
SaveExploits0
CVE
CVE
added 2026/05/14 7:52 p.m.49 views

CVE-2026-8587

CVE-2026-8587 describes a use-after-free in Chrome’s Extensions on macOS that allows arbitrary code execution when a user is convinced to install a crafted (malicious) extension. Affected product: Google Chrome running on Mac. Vulnerable component: Extensions subsystem (use-after-free in extensio...

8.8CVSS6.2AI score0.00175EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/05/14 7:52 p.m.55 views

CVE-2026-8587

Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Chromium security severity: Medium...

0.00175EPSS
SaveExploits0References2
Rows per page
Query Builder