149799 matches found
EUVD-2026-89252
Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95348
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-95293
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
AZL-105846 CVE-2026-54873 affecting package rust 1.75.0-31
Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...
DEBIAN-CVE-2026-54873
Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...
CVE-2015-20122 Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jsp
Seeyon A6 collaborative office automation platform contains an unauthenticated SQL injection vulnerability in the attachids parameter of the file attachment download endpoint that allows remote attackers to extract arbitrary database contents without prior authentication. Attackers can inject...
CVE-2026-93760
A flaw was found in Mongoid. This vulnerability allows a remote attacker, without requiring any credentials, to influence how the database evaluates queries by supplying malicious filter data. This can lead to the unintended disclosure of sensitive stored field values and may also result in reduc...
CVE-2026-73599
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2026-102360 lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memory
A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...
EUVD-2026-88818
A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...
CVE-2026-78214 Apache DolphinScheduler: Actuator Endpoint Authentication Bypass via Percent-Encoded Paths
An authentication bypass vulnerability exists in the protection of Actuator endpoints. The application determines whether authentication is required by matching the incoming request path against protected Actuator paths. By sending a specially crafted request containing a percent-encoded path, a...
CVE-2026-73597
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery CSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of...
CVE-2026-82973 Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox
Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentication is not configured, to inject additional IMAP commands into an authenticated upstream mailbox connection via...
CVE-2026-76720
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...
CVE-2026-76719
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
CVE-2026-37149
CVE-2026-37149 GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0의 SQL 인젝션 개요 CVE ID: CVE-2026-37149 취약점 유형: SQL 인젝션 CWE-89 심각도: 높음High 발견자: Dhyey Patel 설명 GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0에는 "/grocery/searchproducts.php"의 "scost" 매개변수에 SQL 인젝션...
EUVD-2026-88700
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...
CVE-2026-76720
A vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that can be remotely exploited to cause a URL redirect . This flaw also carries a potential risk of Cross-Site Scripting (XSS) . To resolve this vulnerability, HPE provides a software update; users should update to ...