287296 matches found
SUSE CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2026-79190
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
SUSE CVE-2026-79192
Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
SUSE CVE-2026-79201
Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2026-79212
Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-79260
Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
SUSE CVE-2026-79261
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
SUSE CVE-2026-79262
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
PT-2026-82542
Name of the Vulnerable Software and Affected Versions DoXBASE versions prior to 27082026 Description Improper neutralization of input during web page generation leads to a cross-site scripting XSS flaw, which allows Cross Zone Scripting. Cross-site scripting is a type of security flaw where...
CVE-2026-73809: Cleartext Transmission of Sensitive Information
A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...
CVE-2026-73125: Missing Authentication for Critical Function
Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...
Imperative Web Server Oracle Helidon Library Data Access DoS
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as well as to...
Imperative Web Server Oracle Helidon Library Data Access DoS
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
Imperative Web Server Oracle Helidon Privilege Escalation
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
Imperative Web Server Oracle Helidon Unauthorized Access
The vulnerability of the Imperative Web Server component of the Oracle Fusion Middleware library set is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Imperative Web Server Oracle Helidon Privilege Escalation
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
Imperative Web Server Oracle Helidon Privilege Escalation
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
Imperative Web Server Oracle Helidon Privilege Escalation
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
Imperative Web Server Oracle Helidon Library Data Access DoS
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
Imperative Web Server Oracle Helidon DoS
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...