Lucene search
+L

20677 matches found

NVD
NVD
added 2026/08/26 12:16 p.m.8 views

CVE-2026-15985

The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the processotplogin function. This makes it possible for unauthenticated...

8.1CVSS0.00325EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/26 11:36 a.m.9 views

EUVD-2026-66410

The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the processotplogin function. This makes it possible for unauthenticated...

8.1CVSS5.7AI score0.00325EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/08/26 10:58 a.m.9 views

WordPress Classified Listing - Mobile Number Verification plugin <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login vulnerability

WordPress Classified Listing - Mobile Number Verification plugin = 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login vulnerability discovered by Rafie Muhammad - Awesome Motive, Inc. in WordPress Plugin Classified Listing - Mobile Number Verification versions = 1.6.0...

8.1CVSS5.2AI score0.00325EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-78935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsid...

9.6CVSS7.3AI score0.00509EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-79039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted...

8.1CVSS7.5AI score0.00512EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 9:18 p.m.11 views

DEBIAN-CVE-2026-79217

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.3AI score0.00235EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/25 9:18 p.m.8 views

DEBIAN-CVE-2026-79105

Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.4AI score0.00238EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/25 9:18 p.m.8 views

CVE-2026-79105

Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS6AI score0.00238EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/25 9:18 p.m.9 views

CVE-2026-79217

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.4AI score0.00235EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 9:17 p.m.13 views

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS0.00509EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 9:17 p.m.7 views

DEBIAN-CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS6AI score0.00509EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/25 9:17 p.m.10 views

CVE-2026-78957

Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. Chromium security severity: Low...

5.5CVSS5.2AI score0.00112EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/25 9:17 p.m.7 views

CVE-2026-78981

Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. Chromium security severity: Low...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 8:10 p.m.8 views

EUVD-2026-66075

Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

5.2AI score0.00238EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 8:09 p.m.6 views

EUVD-2026-65970

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

5.8AI score0.00509EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/25 8:09 p.m.10 views

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS6AI score0.00509EPSS
SaveExploits0
Patchstack
Patchstack
added 2026/08/25 8:07 a.m.5 views

WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin Mobile App for WooCommerce versions = 0.4.62...

8.6CVSS5.2AI score0.00343EPSS
SaveExploits0Affected Software1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code...

4.3CVSS6.6AI score0.01127EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in WebKit2GTK

A type confusion issue has been resolved through improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7AI score0.01664EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved through improved UI handling. This issue is fixed in iOS 16.2, iPadOS 16.2, and macOS Ventura 13.1. Visiting a website that contains malicious content may lead to UI spoofing...

4.7CVSS6.5AI score0.00527EPSS
SaveExploits0References1
Rows per page
Query Builder