88 matches found
CVE-2026-121039
Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-116463
Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-121039
Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization flaw in Proxy Auth . This vulnerability allows an adjacent attacker to obtain sensitive information by sending crafted network traffic. This issue is categorized under CWE-863 with a Medium security severit...
CVE-2026-121039
Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
WordPress Datawiza Proxy Auth Plugin plugin < 1.1.1 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Datawiza Proxy Auth Plugin versions 1.1.1...
PT-2026-123303
Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in hackney http connect in benoitc hackney allows HTTP Request Splitting via the value a proxy auth fun callback returns. After a 407 response from an HTTP CONNECT proxy, hackney http...
CVE-2026-115214
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator...
EUVD-2026-109352
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator...
CVE-2026-115214 Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator...
CVE-2026-115214 Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator...
CVE-2026-115214
The Datawiza Proxy Auth Plugin for WordPress (versions before 1.1.1 ) contains an unauthenticated privilege escalation vulnerability. The flaw exists because the plugin fails to verify that HTTP request headers regarding user-identity and roles originate from a trusted reverse proxy. This oversig...
PT-2026-122950
The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenticated attackers to create and authenticate as a WordPress administrator...
curl security update
8.12.1-4.el102.7 - fix http2 stream dependency tracking security issue CVE-2026-10536 - fix negotiate state check on connection reuse CVE-2026-5545 - fix proxy auth not cleared on proxy change CVE-2026-7168 - fix credentials not cleared on redirect CVE-2026-6253 - fix HTTP credentials leak on...
SUSE-SU-2026:24220-1 Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write bsc1273126. - CVE-2026-12932: memory leak using --tls-crypt-v2 bsc1273127. - CVE-2026-12996: Potential DoS and memory leak via TLS session use-after-free bsc1273128. - CVE-2026-13117: Heap...
CVE-2026-106243
An incomplete cleanup flaw was found in the Proxy Auth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533426590...
Linux Distros Unpatched Vulnerability : CVE-2026-106243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffi...
SUSE CVE-2026-106243
Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...
DEBIAN-CVE-2026-106243
Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...
CVE-2026-106243
Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...
CVE-2026-106243
Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...