Lucene search
K

20 matches found

OSV
OSV
added 4 days ago3 views

DEBIAN-CVE-2026-10947

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00071EPSS
Exploits0References1
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-11269

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...

0.00008EPSS
Exploits0References2
OSV
OSV
added 2026/05/06 2:41 p.m.2 views

BIT-JAVA-2020-14578

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols ...

4.3CVSS6.6AI score0.00158EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.3 views

PT-2026-37875

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols ...

4.3CVSS6.6AI score0.00158EPSS
Exploits0References13
NVD
NVD
added 2026/04/28 11:16 p.m.1 views

CVE-2026-7336

Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00049EPSS
Exploits0References2
NVD
NVD
added 2026/04/01 5:16 a.m.2 views

CVE-2026-5280

Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00063EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.0 views

PT-2026-35858

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.138 Description A use after free issue exists in Animation, which allows a remote attacker to execute arbitrary code inside a sandbox by utilizing a crafted HTML page. Use after free is a memory...

10CVSS6.2AI score0.00045EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-12617

Malware in sbrugna...

4.3CVSS6.6AI score0.00527EPSS
Exploits0References30
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-1737

Malware in sbrugna...

9.6CVSS7.8AI score0.00259EPSS
Exploits0References22
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-54673

Malicious code in bioql PyPI...

5.5CVSS6.6AI score0.00064EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.3 views

PT-2025-31501 · Helmholz +1 · Rex 200/250 +3

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox. This issue ha...

7.2CVSS6.9AI score0.00736EPSS
Exploits0References12
Cvelist
Cvelist
added 2025/05/29 3:0 p.m.10 views

CVE-2025-5321 aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation

A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component runview Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack c...

6.5CVSS0.00376EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2024-56326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker tha...

7.8CVSS7.3AI score0.0057EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2018-2663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE:...

4.3CVSS6AI score0.0009EPSS
Exploits0References3
CNVD
CNVD
added 2025/02/19 12:0 a.m.4 views

Google Chrome Type Obfuscation Vulnerability (CNVD-2025-12381)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a type-obfuscation vulnerability that can be exploited by an attacker to execute arbitrary code inside a sandbox via specially crafted HTML pages...

8.8CVSS9AI score0.12088EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2025/02/15 1:17 a.m.5 views

CVE-2025-0998

Removed by vendor...

8.3AI score
Exploits0
Vulnrichment
Vulnrichment
added 2021/04/26 4:56 p.m.8 views

CVE-2021-21224

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

9AI score0.42536EPSS
Exploits1References7
OSV
OSV
added 2020/10/21 3:15 p.m.3 views

CVE-2020-14797

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

3.7CVSS3.6AI score
Exploits0References6
RedHat Linux
RedHat Linux
added 2020/04/21 10:29 a.m.4 views

OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

4.3CVSS7.3AI score0.0026EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2020/01/14 12:0 a.m.2 views

PT-2020-1458

Name of the Vulnerable Software and Affected Versions Java SE version 8u231 Description The issue is related to inadequate access control in the JavaFX component of Oracle Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

5.9CVSS6.6AI score0.0163EPSS
Exploits0References17
Rows per page
Query Builder