119487 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-84323
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged...
PT-2026-84623
The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as admin...
RockyLinux 10 : wget (RLSA-2026:62142)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62142 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or...
AlmaLinux 8 : wget (ALSA-2026:62144)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62144 advisory. wget: GNU Wget: Memory corruption via crafted Metalink URL CVE-2026-58469 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memo...
Linux Distros Unpatched Vulnerability : CVE-2026-84137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
RHEL 9 : golang (RHSA-2026:62405)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62405 advisory. The golang packages provide the Go programming language compiler. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Servic...
PT-2026-84752
The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...
Google Chrome Microsoft Edge Sensitive Data Access
The ComputePressure component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data by using a specially craft...
Google Chrome Microsoft Edge Extension Access Data Tampering
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially...
Paint Component Data Compromise
The vulnerability in the Paint component of Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploiting this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Media UI Component Google Chrome Microsoft Edge DoS
The Media UI component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to compromise data integrity and trigger a denial-of-service...
Paint Component Data Compromise
The vulnerability in the Paint component of Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploiting this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Google Chrome Microsoft Edge Sensitive Data Access
The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to insufficient protection of user credentials. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
SplitView Component DoS
The vulnerability in the SplitView component of Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploiting this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML pag...
Isolated Web Apps Data Compromise
The Isolated Web Apps vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Network Component Access Sensitive Data
The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
Network Component Compromise Data Compromise
The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Google Chrome Microsoft Edge Related-Website-Sets Data Access
The vulnerability in the Related-Website-Sets component of Google Chrome and Microsoft Edge web browsers is related to a lack of proper data security mechanisms. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
Google Chrome Edge PageInfo Data Compromise
The PageInfo component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Network Component Compromise Data Compromise
The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to a lack of proper data security mechanisms. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...