43521 matches found
CVE-2026-17853
Google Chrome versions prior to 151.0.7922.72 are vulnerable to an inappropriate implementation in DevTools (CVE-2026-17853). A remote attacker who has already compromised the renderer process can exploit this flaw by using a crafted HTML page to inject scripts or HTML into a privileged page. Thi...
CVE-2026-17853
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17774
Google Chrome versions prior to 151.0.7922.72 are vulnerable to a heap corruption issue caused by insufficient validation of untrusted input in Variations . An attacker positioned in a privileged network environment can exploit this by sending malicious network traffic. The Chromium security seve...
EUVD-2026-50792
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Chromium security severity: High...
PT-2026-66370
The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into through its front-end registration, allowing unauthenticated users to register directly into a privileged group and be granted that group's configured role, up to Administrator whe...
PT-2026-66453
Name of the Vulnerable Software and Affected Versions Eaton Tripp Lite PADM firmware affected versions not specified Description Improper input validation in the authentication component allows an unauthenticated remote attacker to bypass authentication and gain privileged user access to the...
PT-2026-66396
The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking fields an unauthenticated visitor can set through its public booking funnel, allowing an unauthenticated user to assign a privileged booking field such as the approval status and thereby bypass the site's...
PT-2026-66555
IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...
PT-2026-66394
Name of the Vulnerable Software and Affected Versions MotoPress Hotel Booking versions prior to 6.0.4 Description The plugin fails to perform a capability check before returning full customer details during an AJAX action. This allows any authenticated user with low-privileged access, such as a...
PT-2026-66172
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in DevTools allows a remote attacker who has compromised the renderer process to inject scripts or HTML into a privileged page by using a crafted HTML...
CVE-2025-36374: Improper Restriction of XML External Entity Reference
IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...
CVE-2026-22620: Improper Neutralization of Special Elements used in an SQL Command
Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...
Linux Distros Unpatched Vulnerability : CVE-2026-68562
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When a...
PT-2026-66613
Name of the Vulnerable Software and Affected Versions ansible-collection-redhat-leapp affected versions not specified Description A flaw exists where an attacker with privileged write access to a managed node's Leapp report content can manipulate the data. When an operator executes a specific...
Linux Distros Unpatched Vulnerability : CVE-2026-17853
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject...
CVE-2026-17774: Improper Input Validation
Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...
PT-2026-66464
Name of the Vulnerable Software and Affected Versions CentreStack versions prior to 17.5 Description The software contains a hardcoded cryptographic key. Unauthenticated attackers can exploit a static SysNumber value used as entropy for the AccessTicket.Encrypt and AccessTicket.Decrypt functions...
PT-2026-66093
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Variations allows an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Heap...
PT-2026-65985
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A cryptographic flaw allows an attacker in a privileged network position to bypass discretionary access control by sending malicious network traffic. Recommendations Update to version...
CVE-2026-20316
Cisco Secure Firewall Management Center (FMC) Software is affected by CVE-2026-20316 due to static credentials in the web interface, enabling an unauthenticated, remote attacker with a low-privileged account to log in and access sensitive data. Root cause: hard-coded/static credentials for a low-...