34831 matches found
PYSEC-2026-3465 FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
Impact The FiftyOne App/API server fiftyone/server/app.py and the /media route fiftyone/server/routes/media.py unconditionally set a permissive CORS header Access-Control-Allow-Origin: on their responses. Because the embedded App server runs locally and is unauthenticated, this allows any website...
CVE-2024-58330
creationtimestamp| type| source ---|---|--- 2026-07-23 11:23:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrcpxuab4o2v...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in the Media component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who convinced a user to perform certain UI gestures to execute arbitrary code within a sandbox using a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
In GetUserMedia in Google Chrome, before version 150.0.7871.115, a remote attacker who had compromised the renderer process was able to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Media section of Google Chrome before version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Using “after free” in Media in Google Chrome on Linux and ChromeOS before version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of after-free in Media in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted video file. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Integer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
OPENSUSE-SU-2026:11345-1 amazon-ecs-init-1.105.0-2.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.105.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11352-1 proftpd-1.3.9c-1.1 on GA media
These are all security issues fixed in the proftpd-1.3.9c-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11351-1 perl-XML-Bare-0.53-7.1 on GA media
These are all security issues fixed in the perl-XML-Bare-0.53-7.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11349-1 google-osconfig-agent-20260708.00-3.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260708.00-3.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-64437
These are all security issues fixed in the libsrt1 5-1.5.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11354-1 jupyter-matplotlib-0.11.7-18.1 on GA media
These are all security issues fixed in the jupyter-matplotlib-0.11.7-18.1 package on the GA media of openSUSE Tumbleweed...
google-osconfig-agent-20260708.00-2.1 on GA media (moderate)
google-osconfig-agent-20260708.00-2.1 on GA media Announcement ID: openSUSE-SU-2026:11331-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1...
OPENSUSE-SU-2026:11347-1 ffmpeg-8-8.1.2-2.1 on GA media
These are all security issues fixed in the ffmpeg-8-8.1.2-2.1 package on the GA media of openSUSE Tumbleweed...