Lucene search
+L

112911 matches found

UbuntuCve
UbuntuCve
•added 2026/09/17 9:17 p.m.•8 views

CVE-2026-93385

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

5.6AI score0.00312EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/17 9:08 p.m.•10 views

CVE-2026-93385

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.6AI score0.00312EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/17 9:08 p.m.•11 views

EUVD-2026-82489

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

5.7AI score0.00312EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/17 9:08 p.m.•8 views

CVE-2026-93384

Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

5.9AI score0.00245EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/17 9:08 p.m.•37 views

CVE-2026-93383

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

0.00254EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/17 9:08 p.m.•40 views

CVE-2026-93373

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

0.00344EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/17 9:08 p.m.•39 views

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

0.00254EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/17 9:08 p.m.•30 views

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.8AI score0.00252EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/09/17 9:08 p.m.•17 views

EUVD-2026-82482

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00252EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/17 9:08 p.m.•9 views

CVE-2026-93372

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

6.7AI score0.00448EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/09/17 4:09 p.m.•3 views

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

6.5AI score0.04091EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/17 3:17 p.m.•4 views

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

6.5AI score0.04091EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/17 3:08 p.m.•2 views

tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example

A flaw was found in Apache Tomcat. This vulnerability, known as Cross-Site Scripting XSS, allows a remote attacker to inject malicious scripts into the 'number guess example' web page. When other users view the compromised page, these scripts can execute in their web browsers. This could lead to...

6.5AI score0.04091EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/09/17 2:57 p.m.•12 views

EUVD-2026-81675

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

7.5CVSS5.9AI score0.00759EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/17 11:47 a.m.•5 views

USN-8778-1 gst-plugins-good1.0 vulnerability

It was discovered that GStreamer Good Plugins did not limit the size of reassembly buffers when processing fragmented RTP packets. A remote attacker could possibly use this issue to cause GStreamer Good Plugins to use excessive resources, leading to a denial of service...

7.5CVSS7.2AI score0.00961EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/17 8:26 a.m.•8 views

kernel: net: guard timestamp cmsgs to real error queue skbs

A flaw was found in the Linux kernel's networking component. This vulnerability allows a remote attacker to potentially access sensitive information or cause system instability. By sending specially crafted network packets, an attacker can exploit an issue in how the kernel handles timestamping f...

7.1CVSS6AI score0.00128EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/09/17 12:00 a.m.•7 views

The vulnerability of the sctp_association_init() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sctpassociationinit function in the Linux operating system’s kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

8.1CVSS6.7AI score0.00495EPSS
SaveExploits1References12Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•0 views

CVE-2026-93384: Server-Side Request Forgery (SSRF)

Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

3.7CVSS5.9AI score0.00245EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•2 views

CVE-2026-93383: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.6AI score0.00254EPSS
SaveExploits0References3
Redos
Redos
•added 2026/09/17 12:00 a.m.•6 views

ROS-20260917-73-0036

A vulnerability in kernel-lt related to improper handling of exceptional conditions. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

8.8CVSS7.8AI score0.00176EPSS
SaveExploits0
Rows per page
Query Builder