150851 matches found
CVE-2026-17792
Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50713
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17764
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
PT-2026-66587
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, in the 'renew.php' endpoint via the membershipTy...
EUVD-2025-210553
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...
PT-2026-66393
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
PT-2026-66460
A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...
PT-2026-66364
Name of the Vulnerable Software and Affected Versions Spring Tools for Eclipse versions prior to 5.2.1 Spring Tools for VSCode / Cursor / Theia versions prior to 2.2.1 Description Starting Spring Boot applications in Spring Tools with the live information mode enabled allows for remote code...
CVE-2025-69930
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
EUVD-2025-210556
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
Adobe Bridge permission licensing and access control vulnerabilities
Adobe Bridge is a digital asset management and file organization tool developed by Adobe, a company based in the United States. Adobe Bridge has vulnerabilities related to permission management and access control. These vulnerabilities stem from issues with unsanable search paths, allowing...
Apache Traffic Server resource management error vulnerability (CNVD-2026-30704)
Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a resource management vulnerability in Apache Traffic Server, which stems from use-after-free and check-time/usage time errors during remap configuration processing...
CVE-2025-69947
SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...
Apache Traffic Server resource management error vulnerability (CNVD-2026-30701)
Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a resource management vulnerability in Apache Traffic Server, which stems from the ESI plugin’s failure to properly handle recursive requests. Attackers can exploit...
Linux Distros Unpatched Vulnerability : CVE-2026-17792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTM...
CVE-2025-69936
CodeAstro Membership Management System 1.0 is affected by a SQL Injection in /edit_member.php?id=1. The CVE entry has a base CVSS v3.1 score of 9.8 (CRITICAL) with network attack vector, no privileges, no user interaction required, and impacts to confidentiality, integrity, and availability. Root...
CVE-2025-69941
SourceCodester Tailor Management System 1.0 is affected by a SQL Injection in addmeasurement.php?id=1. the vulnerability arises from unsafe SQL handling in that endpoint, with CVSS v3.1 base metrics indicating a CRITICAL impact (C:High, I:High, A:High) and NETWORK attack vector. No remediation or...