Lucene search
+L

108486 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.18 views

PT-2026-43596

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical...

7CVSS6AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.17 views

PT-2026-44688

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description Insufficient validation of untrusted input in the Printing component allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML pag...

9.6CVSS5.8AI score0.00368EPSS
SaveExploits5References157
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.20 views

PT-2026-44694

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description Insufficient validation of untrusted input in the OptimizationGuide component allows a remote attacker who has already compromised the renderer process to perform UI spoofing by using ...

9.6CVSS5.8AI score0.00368EPSS
SaveExploits4References157
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.28 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability. This vulnerability stemmed from an issue with the ANGLE component where uninitialized resources were used, which could allow a remote attacker with access ...

5CVSS5.8AI score0.00199EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.26 views

PT-2026-43686

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.2.0, 11.2.4, 12.0, and 12.1.0 IBM Cognos Transformer versions 11.2.4, 12.0, and 12.1.0 Description Cross-site scripting XSS allows a remote attacker to inject arbitrary JavaScript code into the web user...

8.2CVSS5.6AI score0.0031EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.32 views

PT-2026-43698

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Test Data Fabrication versions 1.0.0 through 1.0.0.2 IBM InfoSphere Optim Test Data Fabrication versions 1.0.2 through 1.0.2.7 Description Remote attackers can perform directory traversal on the system by sending a special...

7.5CVSS5.6AI score0.00596EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.12 views

PT-2026-44633

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description A use after free issue exists in ANGLE. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially...

9.6CVSS5.8AI score0.00368EPSS
SaveExploits4References156
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.13 views

PT-2026-44618

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description An integer overflow in Skia allows a remote attacker who has compromised the renderer process to execute arbitrary code inside a sandbox by using a crafted HTML page. An integer overfl...

9.6CVSS6.3AI score0.00368EPSS
SaveExploits5References156
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.15 views

PT-2026-44609

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description An out of bounds write occurs in ANGLE, which is a compatibility layer that allows OpenGL ES to run on various graphics APIs. This issue allows a remote attacker who has already...

9.6CVSS5.9AI score0.00368EPSS
SaveExploits5References156
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.20 views

PT-2026-44623

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description Insufficient validation of untrusted input in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS5.9AI score0.00368EPSS
SaveExploits2References156
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.24 views

PT-2026-44689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description An inappropriate implementation in Skia allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations Update to...

9.6CVSS5.8AI score0.00368EPSS
SaveExploits5References157
Cvelist
Cvelist
added 2026/05/27 12:00 a.m.48 views

CVE-2026-38808

SQL Injection vulnerability in uzy-ssm-mall v1.1.0 allows a remote attacker to obtain sensitive information via the ProductMapper.xml and /OrderUtil.java components...

0.00288EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.17 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from a problem with UI components that allowed reusing of resources after they were released. This could allow remote...

8.3CVSS6AI score0.00222EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.20 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a buffer overflow vulnerability, which was caused by GPU out-of-bound writes. This vulnerability could allow remote attackers to execute a sandbox escape through a specially crafted...

9.6CVSS6.2AI score0.00243EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.17 views

PT-2026-44650

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description An uninitialized use in ANGLE Almost Native Graphics Layer Engine allows a remote attacker who has already compromised the renderer process to bypass site isolation by using a speciall...

9.6CVSS5.8AI score0.00368EPSS
SaveExploits4References156
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.21 views

PT-2026-43593

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the RemoveRequest function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can resu...

7CVSS6AI score0.00295EPSS
SaveExploits0References2
Redos
Redos
added 2026/05/27 12:00 a.m.23 views

ROS-20260527-73-0001

A vulnerability in the hi311x component of the Linux kernel is related to buffer copying without input validation. Exploitation of the vulnerability could allow a remote attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service via a malicious package...

7.8CVSS7.4AI score0.00164EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. In versions of Google Chrome on Windows before 148.0.7778.216, there was a resource management vulnerability. This vulnerability stemmed from the XR component allowing reusing of resources after they were released. This could allow remote...

8.3CVSS5.9AI score0.00214EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.20 views

PT-2026-43604

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.24 views

PT-2026-43601

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References2
Rows per page
Query Builder