Lucene search
+L

220 matches found

NVD
NVD
•added 2026/10/13 6:16 a.m.•7 views

CVE-2026-108969

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS0.005EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 5:15 a.m.•18 views

CVE-2026-108969

A security vulnerability exists in the Session Handler component of the itsmeravitejak Online-Examination-System (up to commit e6208e630b14657999bbfe4c9912302d2a1e2449). The flaw is located in the Session::checkLogin function within the include/session.php file, where manipulation of the cookname...

7.5CVSS6.7AI score0.005EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 5:15 a.m.•7 views

EUVD-2026-98292

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS6.7AI score0.005EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 5:15 a.m.•37 views

CVE-2026-108969 itsmeravitejak Online-Examination-System Session session.php checkLogin comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS0.005EPSS
SaveExploits0References6
OSV
OSV
•added 2026/10/13 5:15 a.m.•2 views

CVE-2026-108969 itsmeravitejak Online-Examination-System Session session.php checkLogin comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

6.9CVSS5.2AI score
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/10/06 6:41 p.m.•15 views

CVE-2026-106252

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

8.8CVSS6.9AI score0.00303EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-106252: Incorrect Comparison

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

8.8CVSS6.9AI score0.00303EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/10/03 10:23 a.m.•6 views

Incorrect Comparison

Overview Affected versions of this package are vulnerable to Incorrect Comparison through the JceKeyTransRecipient key transport path in pkix/src/main/java/org/bouncycastle/cms/jcajce/JceKeyTransRecipient.java. An attacker can bypass the opt-in key-size check and have an EnvelopedData or...

6.9CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 10:23 a.m.•5 views

Incorrect Comparison

Overview Affected versions of this package are vulnerable to Incorrect Comparison through the JceKeyTransRecipient key transport path in pkix/src/main/java/org/bouncycastle/cms/jcajce/JceKeyTransRecipient.java. An attacker can bypass the opt-in key-size check and have an EnvelopedData or...

6.9CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 10:23 a.m.•5 views

Incorrect Comparison

Overview Affected versions of this package are vulnerable to Incorrect Comparison through the JceKeyTransRecipient key transport path in pkix/src/main/java/org/bouncycastle/cms/jcajce/JceKeyTransRecipient.java. An attacker can bypass the opt-in key-size check and have an EnvelopedData or...

6.9CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 10:23 a.m.•7 views

Incorrect Comparison

Overview Affected versions of this package are vulnerable to Incorrect Comparison through the JceKeyTransRecipient key transport path in pkix/src/main/java/org/bouncycastle/cms/jcajce/JceKeyTransRecipient.java. An attacker can bypass the opt-in key-size check and have an EnvelopedData or...

6.9CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 10:23 a.m.•7 views

Incorrect Comparison

Overview Affected versions of this package are vulnerable to Incorrect Comparison through the JceKeyTransRecipient key transport path in pkix/src/main/java/org/bouncycastle/cms/jcajce/JceKeyTransRecipient.java. An attacker can bypass the opt-in key-size check and have an EnvelopedData or...

6.9CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 10:23 a.m.•7 views

Incorrect Comparison

Overview Affected versions of this package are vulnerable to Incorrect Comparison through the JceKeyTransRecipient key transport path in pkix/src/main/java/org/bouncycastle/cms/jcajce/JceKeyTransRecipient.java. An attacker can bypass the opt-in key-size check and have an EnvelopedData or...

6.9CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/03 10:23 a.m.•6 views

Incorrect Comparison

Overview Affected versions of this package are vulnerable to Incorrect Comparison through the JceKeyTransRecipient key transport path in pkix/src/main/java/org/bouncycastle/cms/jcajce/JceKeyTransRecipient.java. An attacker can bypass the opt-in key-size check and have an EnvelopedData or...

6.9CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/03 12:00 a.m.•14 views

CVE-2026-71892: Incorrect Comparison

In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidationtrue, never ran for a message using RFC 9709 content-encryption key derivation id-alg-cek-hkdf-sha256. The branch that should...

6.9CVSS5.8AI score0.00173EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 3:50 p.m.•14 views

CVE-2026-47577

The NVIDIA GPU Display Driver for Windows contains a vulnerability within its kernel module caused by an incorrect comparison . A successful exploit could allow an attacker to achieve code execution , denial of service , escalation of privileges , information disclosure , and data tampering . No ...

7.8CVSS5.8AI score0.00136EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/30 3:50 p.m.•10 views

CVE-2026-47577

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an incorrect comparison. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tamperi...

7.8CVSS5.8AI score0.00136EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•11 views

CVE-2026-101912: Incorrect Comparison

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

6.3CVSS5.9AI score0.0037EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•12 views

CVE-2026-101913: Incorrect Comparison

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80::/64 instead of the complete fe80::/10 IPv6 link-local range. An attacker-controlled address elsewhere in fe80::/10 can...

6.3CVSS5.9AI score0.00386EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/20 2:16 a.m.•22 views

CVE-2026-93957

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The explo...

5.3CVSS0.00491EPSS
SaveExploits0References9
Rows per page
Query Builder