14497 matches found
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Google Chrome and Microsoft Edge are affected by a vulnerability in the Plugin components caused by insufficient validation of untrusted input. A remote attacker who has already compromised the renderer process can exploit this to leak cross-origin data using a crafted HTML page. This issue affec...
CVE-2026-40898 vulnerabilities
Vulnerabilities for packages: kubo-fips, kargo, mediamtx-fips, coredns-fips, dkron-fips, ipfs-cluster-fips, k8sgateway-fips, eks-distro-fips, frp, kyverno-policy-reporter, eks-distro, teleport, jitsucom-bulker, spegel, opentelemetry-operator, kube-metrics-adapter-fips, q,...
GHSA-VVGJ-X9JQ-8CJ9 vulnerabilities
Vulnerabilities for packages: kubo-fips, kargo, mediamtx-fips, coredns-fips, dkron-fips, ipfs-cluster-fips, k8sgateway-fips, eks-distro-fips, frp, kyverno-policy-reporter, eks-distro, teleport, jitsucom-bulker, spegel, opentelemetry-operator, kube-metrics-adapter-fips, q,...
Insufficient Verification of Data Authenticity
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the processPayment.json.php process. An attacker can increase their own wallet balance by submitting arbitrary...
irrd (>=4.4.0, <=4.4.3), ofjustpy (1.1.2) +3 more potentially affected by CVE-2026-48710 via starlette (0.31.0)
starlette PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - irrd =4.4.0, =4.4.3 - ofjustpy 1.1.2 - ofjustpy-engine 1.1.3 - ofjustpy-plugins 0.0.1 - oj-signing-middleware 0.2.1 Source cves: CVE-2026-487...
PT-2026-46357
Unauthenticated Local File Inclusion in Quirky = 1.23 versions...
PT-2026-46361
Unauthenticated Local File Inclusion in Gamic = 1.15 versions...
PT-2026-46353
Unauthenticated Local File Inclusion in Preservation = 1.10 versions...
PT-2026-46360
Unauthenticated Cross Site Scripting XSS in Grand Car Rental = 3.7 versions...
PT-2026-46371
Unauthenticated Local File Inclusion in Eros = 1.3 versions...
PT-2026-46336
Unauthenticated Local File Inclusion in Corbesier = 1.15.0 versions...
PT-2026-46345
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin = 2.7.2 versions...
PT-2026-46370
Unauthenticated Local File Inclusion in Gunslinger = 1.7 versions...
PT-2026-46387
Name of the Vulnerable Software and Affected Versions WP Meta Sort Posts versions prior to 1.0 Description The WP Meta Sort Posts plugin for WordPress is subject to Cross-Site Request Forgery CSRF, a type of attack where an unauthorized user tricks a victim into performing actions they did not...
PT-2026-46375
Unauthenticated Local File Inclusion in Resurs = 1.3 versions...
PT-2026-46337
Unauthenticated Local File Inclusion in Dazzle = 1.0.0 versions...
PT-2026-46355
Unauthenticated Local File Inclusion in Dom = 1.24 versions...
PT-2026-46344
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3...