212962 matches found
Google Chrome Microsoft Edge Sensitive Data DoS
The vulnerability in the Navigation component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data, as well as trigger a denial-of-service condition via a...
Google Chrome Microsoft Edge Data Compromise
The Printing component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Network Component Google Chrome Microsoft Edge Access Data Tamper Data
The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML...
Workers mechanism Code Execution
The vulnerability in Google Chrome and Microsoft Edge’s Workers mechanism is related to insufficient input validation. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to trigger a denial-of-service condition by using a specially crafted HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...
Speech Component Data Compromise
The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
DevTools Component Sensitive Data Access
The vulnerability in the DevTools component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
Input component of Google DoS
The Input component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Linux kernel L2TP DoS
The vulnerability in the l2tpxmitcore function within net/l2tp/l2tpcore.c of the Linux kernel’s L2TP tunneling protocol implementation is related to improper input validation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129
A module to import media files into media library. The import folder is a plain textfield with no validation. Point it at any directory the web user can read, and the importer copies every file whose extension matches a selected media type into the public files directory and publishes it as a Med...
Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124
This module enables you to add extra layer of verification for user registration. The module doesn't sufficiently validate user-supplied input resulting in an account takeover vulnerability...
PT-2026-84911
Name of the Vulnerable Software and Affected Versions GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor versions prior to 2.4.5 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with...
PT-2026-84723
The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers...
CVE-2026-76782: Unrestricted Upload of File with Dangerous Type
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions:...
PT-2026-84758
Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...
CVE-2026-84357
Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...