Lucene search
+L

886 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•1 views

CVE-2026-5278: Use After Free

Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.6AI score0.00461EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•26 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 146.0.7680.178. The vulnerability stems from a confusion in the instructions responsible for freeing memory in the Web MIDI component. An attacker coul...

8.8CVSS6.2AI score0.00461EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2026/03/31 12:00 a.m.•22 views

chromium -- security fixes

Chrome Releases reports: This update includes 21 security fixes: 493952652 High CVE-2026-5273: Use after free in CSS. Reported by Anonymous on 2026-03-18 491732188 High CVE-2026-5272: Heap buffer overflow in GPU. Reported by inspector-ambitious on 2026-03-11 488596746 High CVE-2026-5274: Integer...

9.6CVSS7.6AI score0.00703EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2026/03/31 12:00 a.m.•78 views

KLA90963 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in CSS can be exploited to cause denial of service or execute...

9.6CVSS8.2AI score0.00703EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/03/11 10:04 p.m.•17 views

CVE-2026-3923

Use after free in WebMIDI in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.8AI score0.00345EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/03/10 12:00 a.m.•13 views

The vulnerability of the snd_usbmidi_free() function in the sound/usb/midi.c module allows for exploitation by attackers, causing a service failure. This vulnerability exposes USB audio devices supported by Linux operating systems.

The vulnerability of the sndusbmidifree function in the sound/usb/midi.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00206EPSS
SaveExploits0References12Affected Software4
Kaspersky
Kaspersky
•added 2026/03/10 12:00 a.m.•87 views

KLA90934 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in WebML can be exploited to cause...

9.6CVSS7.7AI score0.00401EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/06 7:53 a.m.•15 views

CVE-2026-28125

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS5.8AI score0.00557EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/06 12:00 a.m.•12 views

PT-2026-29456

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A use-after-free issue exists in the Web MIDI component of Google Chrome on Android. A remote attacker can potentially execute arbitrary code by tricking a user into visiting a special...

10CVSS7.7AI score0.00523EPSS
SaveExploits2References108
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•15 views

The vulnerability of the snd_usbmidiOutputOpen() function in the sound/usb/midi.c module of Linux’s USB audio device support allows a hacker to cause a service failure.

The vulnerability of the sndusbmidioutputopen function in the sound/usb/midi.c module, which is part of Linux’s USB audio device support, involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a hacker to cause service failures...

5.5CVSS6.6AI score0.00202EPSS
SaveExploits0References17Affected Software2
EUVD
EUVD
•added 2026/03/05 6:30 a.m.•25 views

EUVD-2026-9777

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS5.9AI score0.00557EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/05 6:16 a.m.•18 views

CVE-2026-28125

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS0.00557EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/05 5:54 a.m.•8 views

CVE-2026-28125 WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

5.9AI score0.00557EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/05 5:54 a.m.•45 views

CVE-2026-28125

CVE-2026-28125 is a Local File Inclusion vulnerability in the WordPress Midi theme (Midi plugin by AncoraThemes). The issue arises from improper validation of filenames used in PHP Include/Require, enabling potential PHP Local File Inclusion. Affected software is Midi versions from unspecified st...

8.1CVSS5.9AI score0.00557EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•9 views

CVE-2026-28125

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS5.9AI score0.00557EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/05 5:54 a.m.•70 views

CVE-2026-28125 WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS0.00557EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•24 views

PT-2026-23397

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

5.9AI score0.00557EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•1 views

CVE-2026-28125: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through = 1.14...

8.1CVSS5.8AI score0.00557EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•22 views

WordPress plugin Midi 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00557EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/27 1:36 p.m.•17 views

OPENSUSE-SU-2026:20291-1 Security update for fluidsynth

This update for fluidsynth fixes the following issues: - CVE-2025-56225: NULL pointer deference when loading and invalid MIDI file bsc1256435...

5.8AI score0.00466EPSS
SaveExploits1References2
Rows per page
Query Builder