Lucene search
+L

182752 matches found

Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.17 views

PT-2026-54194

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input allows a remote attacker to bypass navigation restrictions. This occurs when a user is convinced to perform specific UI gestures while...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References445
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.21 views

PT-2026-54358

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in HTML allows a remote attacker to perform Universal Cross-Site Scripting UXSS, which is a vulnerability that enables the execution of...

9.8CVSS6.3AI score0.00503EPSS
SaveExploits0References447
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.14 views

PT-2026-54197

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in the Media component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References448
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.11 views

PT-2026-54340

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in PageInfo allows a remote attacker who has compromised the renderer process to bypass navigation restrictions by using a crafted HTML page...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References447
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.20 views

PT-2026-54074

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in Chromecast allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References451
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.15 views

PT-2026-54391

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in DevTools allows a remote attacker to leak cross-origin data via a crafted HTML page, provided they can convince a user to perform specific ...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References449
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.20 views

PT-2026-54126

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in Chromoting allows a local attacker to potentially perform a sandbox escape via a malicious file. A sandbox escape is a technique used to...

9.8CVSS6.1AI score0.00503EPSS
SaveExploits0References447
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.14 views

PT-2026-54425

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in the Speech component allows a remote attacker who has compromised the renderer process to perform UI spoofing through a crafted HTML page. ...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References448
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.17 views

PT-2026-54152

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in the GPU component on Windows allows a remote attacker who has already compromised the renderer process to obtain potentially sensitive...

9.6CVSS6AI score0.00413EPSS
SaveExploits0References448
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.19 views

PT-2026-54133

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in the Speech component allows a remote attacker who has already compromised the renderer process to perform privilege escalation b...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References446
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.14 views

PT-2026-54111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References451
CNVD
CNVD
added 2026/06/30 12:00 a.m.27 views

Google Chrome Input Validation Vulnerability (CNVD-2026-26522)

Google Chrome is a cross-platform web browser developed by Google Inc. of the United States. There is a security vulnerability in Google Chrome. This vulnerability stems from improper implementations in extensions. Attackers can exploit this vulnerability to bypass the origin policy using a...

4.2CVSS5.9AI score0.00137EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.13 views

PT-2026-54094

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in Glic allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape is a technique used to brea...

9.8CVSS6.1AI score0.00503EPSS
SaveExploits0References451
UbuntuCve
UbuntuCve
added 2026/06/30 12:00 a.m.13 views

CVE-2026-49432

Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP connector can trigger denial-of-service behavior by sending a negative content-length. For the NIO STOMP transport, an attacker can...

7.5CVSS6.2AI score0.00785EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-46606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py...

7.8CVSS5.8AI score0.00212EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:00 a.m.16 views

Axis Communications AXIS OS Improper Validation of Syntactic Correctness of Input (CVE-2024-6173)

A researcher in the AXIS OS Bug Bounty Program has found that a Guard Tour VAPIX API parameter accepted arbitrary values, which could let an attacker block access to the guard tour configuration page in the web interface of the Axis device. Axis has released patched AXIS OS versions for this flaw...

6.5CVSS5.5AI score0.00395EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:00 a.m.17 views

SUSE SLES12 Security Update : opensc (SUSE-SU-2026:2678-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2678-1 advisory. This update for opensc fixes the following issues - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses...

6.8CVSS5.8AI score0.00296EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-56017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.19 views

PT-2026-53839

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Broker versions prior to 5.19.8 Apache ActiveMQ Broker versions 6.0.0 through 6.2.6 Apache ActiveMQ versions prior to 5.19.8 Apache ActiveMQ versions 6.0.0 through 6.2.6 Apache ActiveMQ All versions prior to 5.19.8 Apache...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/06/30 12:00 a.m.30 views

PT-2026-54057

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.8CVSS6AI score0.00503EPSS
SaveExploits0References451
Rows per page
Query Builder