10222 matches found
EUVD-2026-34703
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11242
Google Chrome and Microsoft Edge are affected by a vulnerability in the Plugin components caused by insufficient validation of untrusted input. A remote attacker who has already compromised the renderer process can exploit this to leak cross-origin data using a crafted HTML page. This issue affec...
CVE-2026-40898 vulnerabilities
Vulnerabilities for packages: syncthing, eks-distro, kube-metrics-adapter, prometheus-blackbox-exporter, k3s, kargo, q, kyverno-policy-reporter-plugins-trivy-fips, jitsucom-bulker, kube-metrics-adapter-fips, kubo, kyverno-policy-reporter-ui, rke2-runtime, kubedock-fips,...
GHSA-VVGJ-X9JQ-8CJ9 vulnerabilities
Vulnerabilities for packages: syncthing, eks-distro, kube-metrics-adapter, prometheus-blackbox-exporter, k3s, kargo, q, kyverno-policy-reporter-plugins-trivy-fips, jitsucom-bulker, kube-metrics-adapter-fips, kubo, kyverno-policy-reporter-ui, rke2-runtime, kubedock-fips,...
Insufficient Verification of Data Authenticity
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the processPayment.json.php process. An attacker can increase their own wallet balance by submitting arbitrary...
PT-2026-46356
Unauthenticated Local File Inclusion in Putter = 1.17 versions...
PT-2026-46335
Unauthenticated Local File Inclusion in CopyPress = 1.4.5 versions...
PT-2026-46331
Unauthenticated Local File Inclusion in MaxiNet = 1.2.10 versions...
PT-2026-46329
Unauthenticated Local File Inclusion in Planty = 1.14.0 versions...
PT-2026-46351
Unauthenticated Local File Inclusion in Abelle = 1.22 versions...
PT-2026-46345
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin = 2.7.2 versions...