Lucene search
+L

7663 matches found

Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.25 views

PT-2026-66173

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in WebMCP allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script loaded from on...

9.6CVSS5.6AI score0.00572EPSS
SaveExploits0References377
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.20 views

PT-2026-66062

Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00572EPSS
SaveExploits0References376
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.14 views

PT-2026-66073

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00572EPSS
SaveExploits0References376
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:00 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2026-17754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.5CVSS5.6AI score0.00283EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-17986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypas...

6.5CVSS5.7AI score0.00208EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-17852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML...

6.5CVSS5.5AI score0.00238EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-17743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted...

6.5CVSS5.8AI score0.00283EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-17925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTM...

4.3CVSS5.5AI score0.00155EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-17842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specif...

6.5CVSS5.5AI score0.00245EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.17 views

RockyLinux 8 : firefox (RLSA-2026:47105)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47105 advisory. libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in th...

7.6CVSS6.4AI score0.00521EPSS
SaveExploits1References67
RedHat Linux
RedHat Linux
added 2026/07/28 9:25 p.m.18 views

firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Navigation component...

9.8CVSS5.8AI score0.00215EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/28 9:25 p.m.19 views

firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: DNS component...

9.1CVSS5.8AI score0.00173EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/28 4:23 p.m.16 views

firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Navigation component...

9.8CVSS5.8AI score0.00215EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/28 4:23 p.m.14 views

firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: DNS component...

9.1CVSS5.8AI score0.00173EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2026/07/28 12:00 a.m.13 views

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in the DOM: Navigation...

7.6CVSS5.8AI score0.00521EPSS
SaveExploits1References68
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-16349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153...

5.3AI score0.00215EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/07/24 4:54 p.m.19 views

Open WebUI: Stored web worker XSS via Pyodide

Title: Same-origin Pyodide code execution allows server-side RCE via a shared chat Summary Open WebUI runs client-side Python Pyodide in a same-origin web worker. Through Pyodide's JavaScript API pyodide.http.pyfetch, or the js module which exposes the page's fetch / XMLHttpRequest executed Pytho...

9CVSS6.6AI score0.00286EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/24 4:54 p.m.12 views

GHSA-4R2P-27MH-5M22 Open WebUI: Stored web worker XSS via Pyodide

Title: Same-origin Pyodide code execution allows server-side RCE via a shared chat Summary Open WebUI runs client-side Python Pyodide in a same-origin web worker. Through Pyodide's JavaScript API pyodide.http.pyfetch, or the js module which exposes the page's fetch / XMLHttpRequest executed Pytho...

7.3CVSS6.6AI score0.00286EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/07/23 10:52 p.m.14 views

CVE-2026-16381

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: DNS component...

6.1CVSS5.2AI score0.00173EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/07/23 10:51 p.m.14 views

CVE-2026-16349

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Navigation component...

7.5CVSS5.2AI score0.00215EPSS
SaveExploits0References5
Rows per page
Query Builder