Lucene search
+L

506129 matches found

SUSE CVE
SUSE CVE
added 2026/08/22 12:50 a.m.7 views

SUSE CVE-2026-76021

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.0049EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/08/22 12:50 a.m.6 views

SUSE CVE-2026-76022

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.1AI score0.00511EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/08/22 12:50 a.m.4 views

SUSE CVE-2026-76023

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00498EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.11 views

PT-2026-79566

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...

8.5CVSS6AI score0.00224EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-76020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

7.5CVSS6AI score0.00347EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-76022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

8.8CVSS5.9AI score0.00511EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-68766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and...

8.5CVSS6.3AI score0.00224EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-76018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary...

8.8CVSS6.2AI score0.00422EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-76021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

8.8CVSS6AI score0.0049EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-76017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted networ...

8.8CVSS5.9AI score0.00468EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/21 9:17 p.m.7 views

CVE-2026-69233

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

5.5CVSS0.00248EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 9:17 p.m.7 views

CVE-2026-69235

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are...

6.1CVSS0.00177EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 9:17 p.m.6 views

CVE-2026-69230

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

5.5CVSS0.00196EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 9:17 p.m.7 views

CVE-2026-68508

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate resolves and calls Python objects selected by configuration through resolvetarget in hydra/internal/instantiate/instantiate2.py, allowing attacker-controlled target values and arguments to...

7.8CVSS0.00252EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/21 9:17 p.m.7 views

CVE-2026-62283

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream identifiers created by CreateStream in service/rpc/iostream.go to their creating user, and GET /ws/terminal/:id and GET...

9.9CVSS0.00369EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 9:14 p.m.20 views

CVE-2026-49849

xShop is an open-source e-commerce platform built with Laravel . Version 3.0.3 contains an Unrestricted File Upload vulnerability in the File Attachment Module within the Admin panel. An authenticated administrator can upload executable files (e.g., .php), enabling Remote Code Execution (RCE) and...

9.1CVSS5.8AI score0.00699EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/21 9:14 p.m.11 views

EUVD-2026-64168

xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable files e.g., .php. By uploading a specially crafted php file, an attacker can achieve Remote Code Execution RCE on the...

9.1CVSS5.8AI score0.00699EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 9:14 p.m.6 views

CVE-2026-49849 xShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code Execution

xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable files e.g., .php. By uploading a specially crafted php file, an attacker can achieve Remote Code Execution RCE on the...

9.1CVSS5.9AI score
SaveExploits0References6
OSV
OSV
added 2026/08/21 9:03 p.m.8 views

CVE-2026-50538 libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write

LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...

8.8CVSS6AI score
SaveExploits0References4
CVE
CVE
added 2026/08/21 9:03 p.m.36 views

CVE-2026-50538

LibVNCClient (part of the LibVNCServer project) versions 0.9.12 through 0.9.15 contain an out-of-bounds heap write in the Tight decoder . A malicious or man-in-the-middle VNC server can trigger this by sending a single crafted FramebufferUpdate message, writing attacker-controlled data past the e...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2
Rows per page
Query Builder