Lucene search
+L

285657 matches found

OSV
OSV
•added 2026/10/06 7:17 p.m.•3 views

DEBIAN-CVE-2026-106246

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS0.00178EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 7:17 p.m.•5 views

CVE-2026-106246

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS0.00178EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 7:17 p.m.•4 views

CVE-2026-106244

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

6.5CVSS0.00165EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/06 7:17 p.m.•4 views

DEBIAN-CVE-2026-106222

Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

5.9CVSS0.00185EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 7:17 p.m.•8 views

CVE-2026-106222

Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

5.9CVSS0.00185EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/06 7:17 p.m.•3 views

DEBIAN-CVE-2026-106210

Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

3.1CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 7:17 p.m.•4 views

CVE-2026-106210

Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

3.1CVSS0.002EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 7:17 p.m.•4 views

CVE-2026-106203

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00305EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 7:17 p.m.•4 views

CVE-2026-106205

Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

8.1CVSS0.00212EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 7:17 p.m.•4 views

CVE-2026-106195

Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

0.00205EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/06 7:17 p.m.•8 views

CVE-2026-106182

UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS0.00212EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/06 7:17 p.m.•6 views

DEBIAN-CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

8.6CVSS0.00126EPSS
SaveExploits0References1
OSV
OSV
•added 2026/10/06 7:17 p.m.•4 views

DEBIAN-CVE-2026-106183

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

5.9CVSS0.00255EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 7:17 p.m.•5 views

CVE-2026-106180

Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS0.00217EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/06 7:17 p.m.•9 views

EUVD-2026-93902

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

6.3CVSS0.0018EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:17 p.m.•5 views

CVE-2026-79809

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager . This flaw allows a remote attacker to influence authorization decisions and potentially be assigned an unintended role . No specific version numbers, root cause details, or remediation steps ar...

7.3CVSS0.00239EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 7:17 p.m.•4 views

EUVD-2026-93893

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...

7.8CVSS0.0011EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:17 p.m.•9 views

CVE-2026-79808

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager . This flaw could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or cause a disruption in service availability. No specific patch versions, root cause...

7.8CVSS0.00115EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 7:17 p.m.•6 views

EUVD-2026-93884

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to...

8.8CVSS0.00296EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:17 p.m.•37 views

CVE-2026-79796 Authentication Bypass Vulnerabilities in ClearPass Policy Manager

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected...

9.8CVSS0.00472EPSS
SaveExploits0References1
Rows per page
Query Builder