Lucene search
+L

7087 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/18 12:00 a.m.•11 views

The vulnerability of the Container Isolation FS Filter driver for Windows operating systems allows a hacker to compromise the integrity of the protected information.

The vulnerability of the Container Isolation FS Filter driver for Windows operating systems is related to the incorrect handling of symbolic references before accessing a file. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

5.5CVSS6.5AI score0.00364EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-93378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site...

5.9AI score0.00216EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/18 12:00 a.m.•9 views

ROS-20260918-73-0002

The vulnerability of the rdsconnshutdown function in the net/rds/connection.c module, which is part of the Linux kernel’s networking functions, is related to deficiencies in the isolation of the controlled system area. Exploiting this vulnerability could allow a malicious actor to cause service...

7.5CVSS7.4AI score0.00716EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-93379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium...

6AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-63458: Authorization Bypass Through User-Controlled Key

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoints, including...

7.1CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-58197: Improper Access Control

ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP server containers use the default network permission profile without network isolation, permitting access to...

8.8CVSS5.9AI score0.00372EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/17 10:17 p.m.•17 views

CVE-2026-54519

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory id...

8.8CVSS0.00515EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/17 9:58 p.m.•20 views

EUVD-2026-82580

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory id...

8.8CVSS5.9AI score0.00515EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/17 9:58 p.m.•58 views

CVE-2026-54519 AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion

AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory id...

8.8CVSS0.00515EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/17 9:17 p.m.•10 views

DEBIAN-CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

3.1CVSS5.9AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 9:17 p.m.•17 views

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

3.1CVSS0.00216EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/17 9:17 p.m.•10 views

DEBIAN-CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score0.00252EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 9:17 p.m.•18 views

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

4.3CVSS0.00252EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/09/17 9:17 p.m.•13 views

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

5.9AI score0.00216EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/09/17 9:17 p.m.•16 views

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.9AI score0.00252EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/17 9:08 p.m.•12 views

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

5.9AI score0.00216EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/17 9:08 p.m.•44 views

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

0.00216EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/17 9:08 p.m.•15 views

EUVD-2026-82488

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

5.9AI score0.00216EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/17 9:08 p.m.•15 views

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

3.1CVSS5.9AI score0.00216EPSS
SaveExploits0
CVE
CVE
•added 2026/09/17 9:08 p.m.•133 views

CVE-2026-93378

Google Chrome versions prior to 153.0.8010.52 are vulnerable to a missing authorization flaw in the Storage component. A remote attacker who has already compromised the renderer process can bypass site isolation by using a crafted PDF file . This vulnerability is categorized as Medium severity by...

3.1CVSS5.9AI score0.00216EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder