212962 matches found
DevTools Component DoS
The vulnerability in the DevTools component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
Blink Component Data Compromise
The Blink component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Google Chrome Edge PageInfo Data Compromise
The PageInfo component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
PT-2026-84891
Name of the Vulnerable Software and Affected Versions Component blocks versions 0.0.0 through 1.2.7 Description Stored Cross-site Scripting XSS occurs because the module does not sufficiently validate user input before passing it to token replacement. This issue requires the attacker to possess a...
Linux Distros Unpatched Vulnerability : CVE-2026-84357
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy...
PT-2026-84604
The Photo Gallery by 10Web WordPress plugin before 1.8.44 does not escape two request parameters before reflecting them into input-attribute values on its admin pages one on the Shortcode page, one on the Galleries/Albums list page, so an unauthenticated attacker can craft a link that, when opene...
RHEL 9 : golang (RHSA-2026:62602)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62602 advisory. The golang packages provide the Go programming language compiler. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Servic...
RHEL 9 : osbuild-composer (RHSA-2026:62754)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62754 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...
Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125
This module enables you to add an extra layer of verification for user registration. The module doesn't sufficiently filter user-supplied input before output, resulting in an unauthenticated reflected Cross-site Scripting XSS vulnerability...
PT-2026-84879
Name of the Vulnerable Software and Affected Versions Drupal Media Library Importer versions 0.0.0 through 2.1.6 Description A Path Traversal issue exists where the software fails to properly limit pathnames to a restricted directory. The import folder is a plain text field that lacks validation,...
CVE-2026-53600: Improper Input Validation
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header a GNU longname L, a GNU longlink K, or a PAX x/g header instead of to the next file entry. POSIX requires a PAX...
CVE-2026-76759: Improper Neutralization of Input During Web Page Generation
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions:...
CVE-2026-84325
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-84325
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system acces...
CVE-2026-81201: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3...
Google Chrome Microsoft Edge DoS
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to trigger a denial-of-service condition by using a specially crafted HTML page...
DevTools Component DoS
The vulnerability in the DevTools component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a malicious file...
Google Chrome Microsoft Edge Data Compromise
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to compromise data integrity...
Enterprise component Google Chrome Microsoft Edge Data Compromise
The vulnerability in the Enterprise component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...