65128 matches found
CVE-2026-57214
A flaw was found in RabbitMQ, a messaging and streaming broker. The RabbitMQ management user interface UI improperly handles the x-internal-purpose argument when rendering queue or exchange details. This vulnerability allows a user with permissions to declare a queue or exchange to inject and...
CVE-2026-13982
An incorrect security ui flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514006829...
CVE-2026-13969
An uninitialized use flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513762962...
CVE-2026-13980
An incorrect security ui flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513989973...
CVE-2026-13973
An inappropriate implementation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513832989...
CVE-2026-14026
An incorrect security ui flaw was found in the SplitView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507263861...
CVE-2026-13987
An incorrect security ui flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514039122...
CVE-2026-13998
An incorrect security ui flaw was found in the File Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514070501...
CVE-2026-14028
An incorrect security ui flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=401816601...
CVE-2026-14030
An incorrect security ui flaw was found in the SplitView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=488762971...
CVE-2026-14123
An incorrect security ui flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513856644...
CVE-2026-14126
An incorrect security ui flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513992796...
CVE-2026-14141
An incorrect security ui flaw was found in the Document Picture-in-Picture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514072867...
CVE-2026-14144
An incorrect security ui flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514079793...
CVE-2026-15108
An integer overflow flaw was found in the Extensions API component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=515443146...
CVE-2026-63301
In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding option from the interface; however, the underlying language-deletion API endpoint does not enforce an equivalent server-side authorization check. As a result, an authenticated...
EUVD-2026-49754
In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding option from the interface; however, the underlying language-deletion API endpoint does not enforce an equivalent server-side authorization check. As a result, an authenticated...
CVE-2026-63301
In Quick.CMS, the language-deletion API endpoint lacks server-side authorization, allowing an authenticated administrator to delete the primary language via a direct request and cause application DoS. When combined with CSRF (CVE-2026-1468), an unauthenticated attacker can craft a malicious link ...
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...