17 matches found
CVE-2026-15260
The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access or above to modify or permanently delete other users' and posts' geolocation records by supplying arbitrary record IDs...
Chromium: CVE-2026-14002 Inappropriate implementation in Geolocation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13867 Inappropriate implementation in Geolocation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-14002
Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14002
Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13867
A vulnerability exists in the Geolocation component of Google Chrome and Microsoft Edge (Chromium-based) due to an inappropriate implementation. This flaw allows a remote attacker to perform UI spoofing by navigating a user to a crafted HTML page , which can lead to the false representation of cr...
PT-2026-54278
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in the Geolocation feature allows a remote attacker who has already compromised the renderer process to perform UI spoofing. This is achieved by using a...
PT-2026-54144
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in the Geolocation feature allows a remote attacker to perform UI spoofing, which is the act of mimicking a legitimate user interface to deceive users, b...
EUVD-2010-3120
Malware in sbrugna...
EUVD-2010-3413
Malware in sbrugna...
EUVD-2013-0846
Malware in sbrugna...
EUVD-2025-2366
Malicious code in bioql PyPI...
EUVD-2024-0621
Malicious code in bioql PyPI...
CVE-2025-20268
A vulnerability in the Geolocation-Based Remote Access RA VPN feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies to allow or deny HTTP connections based on a country or region. This vulnerability exists becaus...
Windows Geolocation Service Information Disclosure Vulnerability
...
CVE-2024-20431
Cisco Firepower Threat Defense (FTD) contains a geolocation data handling flaw that can allow an unauthenticated, remote attacker to bypass geolocation-based access control and send traffic to a protected device. The issue stems from improper assignment of geolocation data within the geolocation ...
