106811 matches found
CVE-2026-81841
Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credential...
CVE-2026-81841 Paused shared dashboard access tokens still expose data source configuration
Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credential...
CVE-2026-81841
A vulnerability exists in Grafana where pausing a shared (public) dashboard fails to revoke its access token for endpoints serving frontend bootstrap data. This missing authorization allows anyone with the link to a paused dashboard to retrieve the configuration of its data sources without authen...
CVE-2026-102320
A missing authorization flaw was found in the CORS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=554038924 https://code.google.com/p/chromium/issues/detail?id=102320...
CVE-2026-102310
Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-95297
A missing authorization flaw was found in the Contextual Tasks component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501648493...
CVE-2026-95287
A flaw was found in Chromium. A missing authorization check in the navigation mechanism allows a remote attacker who has compromised a renderer process to bypass site isolation protections by convincing a user to load a crafted HTML page. Site isolation is a security boundary that separates web...
CVE-2026-95342
A missing authorization flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=547027738...
CVE-2026-95301
A missing authorization flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540265100...
CVE-2019-13498
CVE-2019-13498 Título del Exploit: MITM - Falta de HSTS que provoca robo de credenciales y manipulación de contenido Fecha: 07/10/2019 Autor del Exploit: Furqan Khan Página web del proveedor: https://www.oneidentity.com/ Enlace del software:...
cve-2022-42475
This repository does not have a README...
CVE-2026-95371
Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95320
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95296
Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-95290
Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-26083
CVE-2023-26083 – Fuga de direcciones del kernel de Mali GPU a través de Timeline Stream Este repositorio contiene una prueba de concepto PoC del exploit para CVE-2023-26083 , una vulnerabilidad en el controlador de GPU Mali Arm Mali GPU Kernel Driver que permite a un usuario sin privilegios filtr...
NPM: undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors
NPM: undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors vulnerability discovered by ? in WordPress Npm undici versions = 8.10.0, 8.10.2...
CVE-2019-13272
Este repositorio no tiene un README...
missing-cve-nuclei-templates
Lista actualizada semanalmente de CVE faltantes en el repositorio oficial de plantillas de nuclei Nota Este repositorio es 100% automatizado, por lo que puede haber errores, pero en general es bastante preciso. Ve a la sección "Cómo funciona" para entender cómo se recopilan los datos. Estadística...