2312 matches found
EUVD-2026-79971
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...
CVE-2026-91717
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...
CVE-2026-79551
Tenda Technology Co., Ltd NVR4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key...
CVE-2026-79551: Use of Hard-coded Cryptographic Key
Tenda Technology Co., Ltd NVR4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key...
PT-2026-93135
Name of the Vulnerable Software and Affected Versions Google Chrome for Android versions prior to 153.0.8010.47 Description A missing authorization mechanism allows a local attacker to obtain sensitive information through a co-installed application. Recommendations Update Google Chrome for Androi...
OESA-2026-3808 pcp security update
Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. Security Fixes: A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed...
OESA-2026-3809 pcp security update
Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. Security Fixes: A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed...
CVE-2026-78361: Missing Authorization
The zipMoneyZip Co Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request handlers, and does not restrict which option name a caller may supply, allowing unauthenticated users to delete arbitrary WordPress options...
CVE-2026-7188: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2...
CVE-2026-8323: URL Redirection to Untrusted Site
URL redirection to untrusted site 'open redirect' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affects Access Control System: before Versiyon 2...
CVE-2026-87486
A clickjacking flaw was found in the TrustedWebActivities component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514017067...
CVE-2026-87552
A missing authorization flaw was found in the TrustedWebActivities component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=547426657...
CVE-2026-87597
A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...
DEBIAN-CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
CVE-2026-87552
Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...
DEBIAN-CVE-2026-87486
Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. Chromium security severity: Medium...
CVE-2026-87597
Google Chrome on Android versions prior to 153.0.8010.36 is vulnerable to a UI misrepresentation in CustomTabs . This flaw allows a remote attacker to spoof the address bar through a co-installed application. Remediation involves updating the software to a patched version, such as the one provide...
CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
EUVD-2026-74459
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
CVE-2026-87597
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...