Lucene search
+L

12081 matches found

vulnersOsv
vulnersOsv
•added 2026/06/05 9:33 a.m.•2 views

org.keycloak:keycloak-forms (1.0-alpha-1-12062013), org.keycloak:keycloak-server (1.0-alpha-1-12062013) potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (1.0-alpha-1-12062013)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1-12062013 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1-12062013 - org.keycloak:keycloak-server...

2.7CVSS5.8AI score0.0045EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/06/05 9:33 a.m.•2 views

org.keycloak:keycloak-forms (1.0-alpha-1) potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (1.0-alpha-1)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1 Source cves: CVE-2026-9088 Source advisory:...

2.7CVSS5.8AI score0.0045EPSS
SaveExploits0
Patchstack
Patchstack
•added 2026/06/05 9:00 a.m.•28 views

WordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Frissi0n in WordPress Plugin Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms versions = 1.1.1...

9.8CVSS5.5AI score0.00476EPSS
SaveExploits1Affected Software1
Patchstack
Patchstack
•added 2026/06/05 8:59 a.m.•25 views

WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Frissi0n in WordPress Plugin Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms versions = 1.2.1...

9.8CVSS5.5AI score0.00564EPSS
SaveExploits1Affected Software1
Patchstack
Patchstack
•added 2026/06/05 8:59 a.m.•38 views

WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Frissi0n in WordPress Plugin WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms versions = 1.1.4...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits1Affected Software1
The Hacker News
The Hacker News
•added 2026/06/05 8:38 a.m.•34 views

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise. The vulnerability in question is CVE-2026-3300 CVSS score: 9.8, a remote code execution...

9.8CVSS6.9AI score0.04431EPSS
SaveExploits1
EUVD
EUVD
•added 2026/06/05 12:31 a.m.•23 views

EUVD-2026-34614

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

7.7AI score0.00264EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/05 12:00 a.m.•31 views

CollegeManagementSystem Code Injection Vulnerability

CollegeManagementSystem is a comprehensive management system for college students and academic administration, developed by Tittu Varghese. CollegeManagementSystem has a code injection vulnerability. This vulnerability stems from improper handling of the departmentname parameter in the...

5.3CVSS5.1AI score0.00273EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/06/05 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-11153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

9.1CVSS7.5AI score0.00264EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•9 views

CVE-2026-11333: Unrestricted Upload of File with Dangerous Type

A security vulnerability has been detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. The impacted element is an unknown function of the file dashboardpage/forms/uploadstudentdata.php of the component Student Data...

6.5CVSS6.2AI score0.00214EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•10 views

CVE-2026-11334: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This affects an unknown function of the file dashboardpage/forms/fetch.php. Performing a manipulation of the argument departmentcode results in...

7.5CVSS6.9AI score0.00284EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/04 11:17 p.m.•16 views

CVE-2026-11153

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.1CVSS0.00264EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/04 11:17 p.m.•13 views

CVE-2026-11153

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.1CVSS7.8AI score0.00264EPSS
SaveExploits0References3
CVE
CVE
•added 2026/06/04 11:05 p.m.•112 views

CVE-2026-11153

A side-channel information leakage vulnerability exists in the Forms component of Google Chrome and Microsoft Edge web browsers in versions prior to 149.0.7827.53 . The root cause is improper protection against attacks through external physical channels, which allows a remote attacker to leak cro...

9.1CVSS7.7AI score0.00264EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/04 11:05 p.m.•20 views

CVE-2026-11153

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

7.7AI score0.00264EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/04 11:05 p.m.•12 views

CVE-2026-11153

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

7.7AI score0.00264EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2026/06/04 11:05 p.m.•35 views

CVE-2026-11153

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

9.1CVSS7.7AI score0.00264EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/06/04 11:05 p.m.•57 views

CVE-2026-11153

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

0.00264EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/06/04 2:05 p.m.•29 views

WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Frissi0n in WordPress Plugin Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms versions = 1.4.3...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/06/04 2:03 p.m.•23 views

WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.8 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Frissi0n in WordPress Plugin Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms versions = 1.1.8...

9.8CVSS5.5AI score0.00564EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder