Lucene search
+L

159511 matches found

OSV
OSV
•added 2026/09/29 8:17 p.m.•6 views

DEBIAN-CVE-2026-102325

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS6.1AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•10 views

CVE-2026-102325

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS0.00234EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/29 8:17 p.m.•6 views

DEBIAN-CVE-2026-102303

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS6.1AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•8 views

CVE-2026-102303

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS0.00277EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/29 8:17 p.m.•7 views

DEBIAN-CVE-2026-102300

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS6.1AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 8:11 p.m.•20 views

CVE-2026-102253

Versions of iperf3 prior to 3.22 are vulnerable to a denial of service (DoS) vulnerability. An unauthenticated remote attacker can trigger an unrecoverable infinite loop in the server's UDP receive worker by sending a single crafted control-channel parameter message followed by one 16-byte UDP da...

8.7CVSS5.9AI score0.00431EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/09/29 7:55 p.m.•10 views

EUVD-2026-89409

Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send...

10CVSS6.1AI score0.00454EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/29 7:45 p.m.•42 views

CVE-2026-102318

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

0.00214EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/29 7:45 p.m.•43 views

CVE-2026-102325

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

0.00234EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/29 7:45 p.m.•95 views

CVE-2026-102325

A vulnerability in the Skia graphics library within Google Chrome (prior to version 154.0.8037.92 ) allows a remote attacker to obtain cross-origin data . This issue is triggered by a crafted HTML page and involves an uninitialized resource . While the vulnerability is classified with high securi...

4.3CVSS6.1AI score0.00234EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/09/29 7:45 p.m.•6 views

EUVD-2026-89383

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS6.1AI score0.00277EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/29 7:45 p.m.•9 views

CVE-2026-102303

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

6.1AI score0.00277EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/29 7:45 p.m.•43 views

CVE-2026-102303

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

0.00277EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 7:45 p.m.•7 views

EUVD-2026-89376

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

4.7CVSS6.2AI score0.00277EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/29 7:42 p.m.•11 views

CVE-2026-53989

Dockhand versions prior to 1.0.36 are vulnerable to an open redirect in the OIDC initiation endpoint. This flaw allows unauthenticated remote attackers to inject an unvalidated redirect query parameter, forcing authenticated users to navigate to attacker-controlled sites. By targeting the OIDC ca...

5.3CVSS6AI score0.00258EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/29 7:42 p.m.•10 views

CVE-2026-53989 Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

5.3CVSS6AI score0.00258EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 7:28 p.m.•13 views

EUVD-2026-89353

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service and to access so...

4.8CVSS6.3AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 7:28 p.m.•7 views

CVE-2026-76734 Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant On

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service and to access so...

4.8CVSS6.3AI score0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 7:28 p.m.•47 views

CVE-2026-76731 Authentication Bypass in the Captive Portal of HPE Networking Instant On

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain limited access to some data and to make limited changes...

6.5CVSS0.00317EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 7:28 p.m.•17 views

EUVD-2026-89350

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain limited access to some data and to make limited changes...

6.5CVSS6.1AI score0.00317EPSS
SaveExploits0References1
Rows per page
Query Builder