Lucene search
+L

159566 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•2 views

CVE-2026-106288: Missing Authorization

Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.9AI score0.0018EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-54472: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...

9.8CVSS6.1AI score0.00509EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•4 views

PT-2026-106877

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows, allows a remote attacker to read memory outsi...

9.6CVSS6AI score0.00438EPSS
SaveExploits0References252
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•10 views

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3196)

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust memory resources on the affected device, leading to a...

8.6CVSS7.7AI score0.01936EPSS
SaveExploits0References2
Redos
Redos
•added 2026/10/06 12:00 a.m.•8 views

ROS-20261006-73-0196

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to deficiencies in error handling. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

8.8CVSS6.7AI score0.00663EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106895

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Sync component allows a remote attacker to obtain sensitive information by sending crafted network traffic. Recommendations Update Google Chrome to versio...

9.6CVSS5.9AI score0.00438EPSS
SaveExploits0References252
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•8 views

Cisco ASA Uncontrolled Resource Consumption (CVE-2021-34792)

A vulnerability in the memory management of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper resource...

8.6CVSS7.4AI score0.01444EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•9 views

Cisco ASA Cross-site Scripting (CVE-2024-20341)

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an affected...

6.1CVSS6.2AI score0.00426EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•3 views

CVE-2026-106250: Missing Authorization

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.9AI score0.0017EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•3 views

CVE-2026-106304: Out-of-bounds Read

Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

4.7CVSS6.1AI score0.00202EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•6 views

PT-2026-107053

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6AI score0.00438EPSS
SaveExploits0References251
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•7 views

Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2021-34783)

A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This...

8.6CVSS7.4AI score0.01614EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•7 views

Cisco ASA Incorrect Authorization (CVE-2022-20928)

A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to establish a connection as a different user. This vulnerability is due to...

5.8CVSS6.3AI score0.00734EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-105263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file...

5.8CVSS5AI score0.00232EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•9 views

Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-12673)

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

8.6CVSS7.5AI score0.01786EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•7 views

Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2021-40117)

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because incomin...

8.6CVSS7.4AI score0.01543EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•11 views

Cisco ASA Origin Validation Error (CVE-2023-20275)

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper...

4.3CVSS5.8AI score0.00416EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•4 views

PT-2026-106969

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

9.6CVSS5.9AI score0.00438EPSS
SaveExploits0References251
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•9 views

Cisco ASA Authentication Bypass by Spoofing (CVE-2023-20256)

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

5.8CVSS6.2AI score0.00562EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•5 views

PT-2026-106893

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Passwords component that allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to...

9.6CVSS5.8AI score0.00438EPSS
SaveExploits0References252
Rows per page
Query Builder