863 matches found
PT-2026-102415
Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A weakness exists in the PSL Wildcard Handler component within the opendmarc get tld function of the libopendmarc/opendmarc tld.c file. A remote attacker can perform a manipulation that leads to an...
Important: dotnet10.0
Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Exposure of sensitive information to an...
Important: dotnet9.0
Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Affected Packages: dotnet9.0 Issue Correction...
CVE-2026-101278
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
CVE-2026-101278: Origin Validation Error
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
CVE-2026-102878: Origin Validation Error
mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...
Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3114)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3114 advisory. Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to...
CVE-2026-18825
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...
CVE-2026-18825 Origin validation error in the connect-xcors npm package
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...
CVE-2026-18825
The connect-xcors npm package contains an Origin Validation Error within its middleware. This flaw allows an attacker to bypass origin verification , potentially enabling the execution of cross-domain authenticated requests . The vulnerability has a CVSS 4.0 base score of 5.3 (MEDIUM) . No specif...
EUVD-2026-88239
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...
CVE-2026-18825 Origin validation error in the connect-xcors npm package
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...
PT-2026-99874
Name of the Vulnerable Software and Affected Versions connect-xcors npm package affected versions not specified Description An origin validation error in the middleware allows an attacker to bypass origin verification. This flaw enables the execution of cross-domain authenticated requests, which...
CVE-2026-18825: Origin Validation Error
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...
Astra Linux – Vulnerability in Chromium
Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-100646: Origin Validation Error
SiYuan is a self-hosted personal knowledge management system. In versions up to and including 3.8.3, the kernel's authentication guards CheckAuth in kernel/model/session.go and IsSessionOriginAllowed in kernel/util/net.go fail open when the HTTP Origin header is absent, on the incorrect assumptio...
CVE-2026-100598: Origin Validation Error
OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...
CVE-2026-85682
The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wprest nonce to window.opener via postMessage with a wildcard targetOrigin. This makes it possible for unauthenticated attackers to ste...
CVE-2026-85682 YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route
The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wprest nonce to window.opener via postMessage with a wildcard targetOrigin. This makes it possible for unauthenticated attackers to ste...
EUVD-2026-85816
The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wprest nonce to window.opener via postMessage with a wildcard targetOrigin. This makes it possible for unauthenticated attackers to ste...