116874 matches found
ROS-20260911-73-0090
The vulnerability of the WebHID component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260911-73-0064
The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260911-73-0060
The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...
ROS-20260911-73-0054
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to bypass the sandboxing protection mechanisms...
ROS-20260911-73-0046
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
ROS-20260911-73-0041
The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2026-76189
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...
CVE-2026-52630
SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.class.php...
PT-2026-90493
Name of the Vulnerable Software and Affected Versions Woltlab WCF versions prior to 6.2.5 Description A remote attacker can perform a SQL Injection, which is a technique that allows an attacker to interfere with the queries that an application makes to its database. This issue occurs within the...
CVE-2026-52630
SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.class.php...
EUVD-2026-76701
SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.class.php...
ROS-20260911-73-0068
The vulnerability of the Password component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the RPC Runtime Library for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the RPC Runtime Library in Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...
jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections
A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously...
micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests
A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...
commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input
A flaw was found in Apache Commons Configuration. When processing an untrusted configuration file, a remote attacker could provide specially crafted YAML input with cycles. This could lead to an uncontrolled recursion, causing a StackOverflowError and resulting in a Denial of Service DoS for the...
CVE-2026-81213
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-supplied URLs...