47439 matches found
The vulnerability of the Google Chrome browser’s CSS component, which allows a hacker to trigger a service failure
The vulnerability of the Google Chrome browser’s CSS component relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...
EUVD-2026-17009
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...
EUVD-2026-16893
Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies...
CVE-2026-32972
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...
CVE-2026-32972 OpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...
CVE-2026-32972 OpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...
CVE-2026-32972
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...
CVE-2026-32972 OpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...
CVE-2026-32972
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability (CVE-2026-32972) that lets authenticated operators with only operator.write permission access admin-only browser profile management routes via browser.request. This allows creating or modifying browser profiles and persistin...
[SECURITY] Fedora 43 Update: chromium-146.0.7680.164-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
OpenClaw 安全漏洞
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to cause an authenticated operator with only operator.write privileges to access the administrator-specific browser profile management rout...
PT-2026-28453
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.11 Description An authorization bypass exists that allows authenticated operators with operator.write permission to access admin-only browser profile management routes via browser.request. This allows attacker...
PT-2026-33145
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description A type confusion issue exists in the Turbofan JIT Just-In-Time compiler within the V8 engine. This flaw occurs during CSE Common Subexpression Elimination and GVN Global Value Numberin...
CVE-2026-34530
creationtimestamp| type| source ---|---|--- 2026-03-28 19:03:19+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-xfqj-3vmx-63wv 2026-03-28 19:03:19+00:00| published-proof-of-concept|...
CVE-2026-34362
WWBN AVideo is an open source video platform. In versions up to and including 26.0, the verifyTokenSocket function in plugin/YPTSocket/functions.php has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout. This allows...
[SECURITY] Fedora 42 Update: roundcubemail-1.6.14-1.fc42
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Chromium: CVE-2026-4442 Heap buffer overflow in CSS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
[SECURITY] Fedora 43 Update: roundcubemail-1.6.14-1.fc43
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
SUSE CVE-2026-32758
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.2 and below are vulnerable to Path Traversal through the resourcePatchHandler http/resource.go. The destination path in resourcePatchHandler is...
[SECURITY] Fedora 44 Update: roundcubemail-1.7~rc5-1.fc44
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...