10225 matches found
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...
Chromium: CVE-2026-11242 Insufficient validation of untrusted input in Plugins
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-41567 Docker: `PUT /containers/{id}/archive` executes container binary on the host
Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via PUT /containers/id/archive or piped through docker cp -, the daemon resolves decompression binaries such as xz or unpigz fr...
EUVD-2026-34703
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Google Chrome and Microsoft Edge are affected by a vulnerability in the Plugin components caused by insufficient validation of untrusted input. A remote attacker who has already compromised the renderer process can exploit this to leak cross-origin data using a crafted HTML page. This issue affec...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-40898 vulnerabilities
Vulnerabilities for packages: dkron-fips, kubo-fips, kargo, kyverno-policy-reporter-fips, kyverno-policy-reporter-plugins-trivy, syncthing-fips, kubo, syncthing, jitsucom-bulker, kubernetes-dns-node-cache-fips, commercial-expanso-edge, opentelemetry-operator-fips, rke2-runtime-fips, ipfs-cluster,...
GHSA-VVGJ-X9JQ-8CJ9 vulnerabilities
Vulnerabilities for packages: dkron-fips, kubo-fips, kargo, kyverno-policy-reporter-fips, kyverno-policy-reporter-plugins-trivy, syncthing-fips, kubo, syncthing, jitsucom-bulker, kubernetes-dns-node-cache-fips, commercial-expanso-edge, opentelemetry-operator-fips, rke2-runtime-fips, ipfs-cluster,...
Insufficient Verification of Data Authenticity
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the processPayment.json.php process. An attacker can increase their own wallet balance by submitting arbitrary...
PT-2026-46335
Unauthenticated Local File Inclusion in CopyPress = 1.4.5 versions...
PT-2026-46351
Unauthenticated Local File Inclusion in Abelle = 1.22 versions...
PT-2026-46371
Unauthenticated Local File Inclusion in Eros = 1.3 versions...