Lucene search
+L

1822 matches found

osv_debian
osv_debian
•added 2026/07/30 1:16 a.m.•20 views

DEBIAN-CVE-2026-17844

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...

4.3CVSS5.2AI score0.00157EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/07/30 1:16 a.m.•23 views

DEBIAN-CVE-2026-17666

Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...

9.1CVSS8AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/30 12:25 a.m.•269 views

CVE-2026-17970

Google Chrome versions prior to 151.0.7922.72 are vulnerable to UI spoofing due to insufficient validation of untrusted input in Passwords . An attacker positioned in a privileged network environment can trigger this impact via malicious network traffic. The vulnerability is reported to have a Lo...

4.3CVSS5.3AI score0.00187EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/07/30 12:19 a.m.•81 views

CVE-2026-17903

Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged page via malicious network traffic. Chromium security severity: Low...

0.00165EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/30 12:19 a.m.•25 views

EUVD-2026-50619

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...

4.3CVSS5.2AI score0.00157EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/30 12:19 a.m.•289 views

CVE-2026-17870

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security issue involving insufficient validation of untrusted input in the Cast component. This flaw allows an attacker residing on the same local network segment to leak cross-origin data through malicious network traffic. This vu...

4.3CVSS5.2AI score0.00157EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/30 12:19 a.m.•22 views

CVE-2026-17870

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...

5.2AI score0.00157EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/30 12:19 a.m.•22 views

EUVD-2026-50593

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...

4.3CVSS5.2AI score0.00157EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/30 12:19 a.m.•76 views

CVE-2026-17844

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...

0.00157EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/30 12:19 a.m.•13 views

CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

8.1AI score0.00178EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/30 12:19 a.m.•80 views

CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

0.00178EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/07/30 12:19 a.m.•33 views

CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

7.5CVSS8.1AI score0.00178EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/07/30 12:18 a.m.•24 views

CVE-2026-17666

Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...

9.1CVSS8AI score0.00173EPSS
SaveExploits0
CVE
CVE
•added 2026/07/29 5:24 p.m.•90 views

CVE-2026-8497

Devolutions Password Manager versions 2026.2.1.0 and earlier on Android, iOS, and macOS are vulnerable to improper certificate validation during Devolutions Server connection handling. An adjacent-network attacker can exploit this flaw to intercept and modify sensitive information using a forged ...

7.4CVSS5.9AI score0.00132EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/07/29 5:24 p.m.•24 views

EUVD-2026-50422

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate...

7.4CVSS5.9AI score0.00132EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•12 views

CVE-2026-8497: Improper Certificate Validation

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate...

7.4CVSS5.8AI score0.00132EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/07/28 4:33 p.m.•24 views

CVE-2026-47180

A flaw was found in Zeroconf, a Python implementation of multicast DNS service discovery. An unauthenticated attacker on the local network can send a specially crafted multicast DNS mDNS packet with chained pointers. This can trigger a recursion error, leading to sustained CPU usage, excessive...

6.5CVSS5.7AI score0.0037EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/07/27 11:37 a.m.•66 views

CVE-2026-12989 Multiple vulnerabilities in Ghost Robotics' Vision 60

A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...

8.7CVSS0.00312EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•24 views

PT-2026-65007

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS7.3AI score0.01174EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/25 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-60193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. Supported versions that are affected are 9.7.0-9.7.1. Difficult to explo...

8.5CVSS7AI score0.00334EPSS
SaveExploits0References2
Rows per page
Query Builder