Lucene search
+L

91627 matches found

Cvelist
Cvelist
added 2026/09/09 2:27 a.m.31 views

CVE-2026-12956 Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter

The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the createitem handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's createitempermissionscheck function only verifies a wprest nonce which is...

5.3CVSS0.00238EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/09 2:27 a.m.20 views

CVE-2026-12956

The WP Event Solution (Eventin) WordPress plugin (versions ≤ 4.1.22 ) is affected by a Missing Authorization vulnerability in the /wp-json/eventin/v2/orders REST endpoint. The create_item_permissions_check() function relies solely on a wp_rest nonce that is leaked to every visitor via the etn-pub...

5.3CVSS5.6AI score0.00238EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/09/09 2:10 a.m.7 views

CVE-2026-87434

A flaw was found in Chromium, affecting Google Chrome. A remote attacker, having compromised the renderer process, could exploit missing authorization in Cross-Origin Resource Sharing CORS to bypass the web origin policy. This could be achieved by enticing a user to visit a crafted HTML page,...

3.1CVSS5.8AI score0.00269EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 2:10 a.m.6 views

CVE-2026-87534

A flaw was found in WebView in Google Chrome. This missing authorization vulnerability allows a remote attacker, by leveraging social engineering techniques, to bypass system access restrictions. This can be achieved through specially crafted network traffic...

9.8CVSS5.8AI score0.00214EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 2:10 a.m.6 views

CVE-2026-87429

A flaw was found in the ServiceWorker component of Chromium. A remote attacker, after compromising the renderer process, could exploit a missing authorization vulnerability by crafting a malicious HTML page. This could allow the attacker to bypass system access restrictions...

6.5CVSS5.8AI score0.00306EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:57 a.m.7 views

CVE-2026-87622

A flaw was found in chromium-browser. Missing authorization in the Federated Credential Management FedCM API allowed a remote attacker to bypass the web origin policy. This bypass could be achieved by enticing a user to visit a crafted HTML page, potentially leading to unauthorized access to...

4.3CVSS5.7AI score0.00203EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:47 a.m.6 views

CVE-2026-87543

A flaw was found in Google Chrome. A remote attacker who has compromised the renderer process can exploit a missing authorization vulnerability by crafting a malicious HTML page. This allows them to bypass site isolation, which is a security mechanism designed to protect user data and prevent...

4.3CVSS5.6AI score0.00189EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:47 a.m.9 views

CVE-2026-87443

A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502768228...

6.5CVSS5.6AI score0.00337EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/09 1:46 a.m.8 views

CVE-2026-87475

A missing authorization flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507225626...

6.5CVSS5.6AI score0.00236EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/09/09 1:46 a.m.7 views

CVE-2026-87493

A flaw was found in chromium-browser. Missing authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This can be achieved by leveraging social engineering techniques through a specially crafted HTML page...

6.5CVSS5.7AI score0.00202EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:46 a.m.6 views

CVE-2026-87552

A flaw was found in Google Chrome on Android. A local attacker could exploit missing authorization in the TrustedWebActivities feature via a co-installed application. This could allow the attacker to obtain sensitive information...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:46 a.m.5 views

CVE-2026-87557

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit a missing authorization vulnerability in LocalNetworkAccess. This could allow the attacker to bypass system access restrictions by using a specially crafted HTML page...

4.3CVSS5.8AI score0.00221EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:46 a.m.6 views

CVE-2026-87431

A flaw was found in Google Chrome's Extensions. This missing authorization vulnerability allows a remote attacker to obtain sensitive information. The attacker can exploit this by persuading a user to install a specially crafted Chrome extension...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:45 a.m.4 views

CVE-2026-87556

A flaw was found in the Chromium browser. This missing authorization vulnerability allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive system resources...

4.3CVSS5.8AI score0.00282EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:45 a.m.5 views

CVE-2026-87537

A flaw was found in Google Chrome's Extensions. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows the attacker to execute arbitrary code outside of the browser's security sandbox by sending specially...

8.1CVSS6.6AI score0.00302EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:43 a.m.4 views

CVE-2026-87606

A flaw was found in Google Chrome's SiteIsolation feature. A remote attacker, after compromising the renderer process, could exploit missing authorization to bypass site isolation by using a specially crafted HTML page. This could allow the attacker to access data or functionality that should be...

8.1CVSS5.7AI score0.0024EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:43 a.m.4 views

CVE-2026-87603

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this missing authorization vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthorize...

6.5CVSS5.9AI score0.00217EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:36 a.m.5 views

CVE-2026-87498

A missing authorization flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=552413517...

7.9CVSS5.6AI score0.0019EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/09 1:24 a.m.5 views

CVE-2026-87511

A flaw was found in DevTools in Google Chrome. Missing authorization in this component allows a remote attacker to obtain sensitive cross-origin data. This can be achieved by exploiting the vulnerability with a specially crafted Chrome extension...

4.3CVSS5.8AI score0.00209EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/09 1:24 a.m.6 views

CVE-2026-87513

A flaw was found in ControlledFrame in Chromium. A remote attacker could leverage social engineering techniques to exploit a missing authorization vulnerability. By tricking a user into interacting with a specially crafted HTML page, the attacker could bypass system access restrictions...

6.5CVSS5.8AI score0.00285EPSS
SaveExploits1References2
Rows per page
Query Builder