Lucene search
+L

6710 matches found

NVD
NVD
added 12 hours ago3 views

CVE-2026-17943

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

SaveExploits0References2
NVD
NVD
added 12 hours ago2 views

CVE-2026-17674

Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...

SaveExploits0References2
CVE
CVE
added 12 hours ago7 views

CVE-2026-17943

CVE-2026-17943 : In Google Chrome, an Inappropriate implementation in the Parser allows a remote attacker to bypass Content Security Policy via a crafted HTML page. Affected software is Chrome prior to version 151.0.7922.72. The issue is described as a CSP bypass due to parser behavior; impact is...

5.9AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 12 hours ago1 views

CVE-2026-17943

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

5.9AI score
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 12 hours ago15 views

CVE-2026-17943

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

SaveExploits0References2
EUVD
EUVD
added 12 hours ago3 views

EUVD-2026-50869

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

5.9AI score
SaveExploits0References2
CVE
CVE
added 13 hours ago8 views

CVE-2026-17674

CVE-2026-17674 affects Google Chrome up to version 151.0.7922.72, where an inappropriate HTML implementation can allow a remote attacker to bypass the Content Security Policy via a crafted HTML page. The issue is described as a CSP bypass in Chrome’s HTML handling (Chromium) with High severity. A...

5.9AI score
SaveExploits0References2
Cvelist
Cvelist
added 13 hours ago17 views

CVE-2026-17674

Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...

SaveExploits0References2
EUVD
EUVD
added 13 hours ago3 views

EUVD-2026-50800

Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 13 hours ago6 views

PT-2026-65993

Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: High...

5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 13 hours ago4 views

PT-2026-66262

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

5.9AI score
SaveExploits0References3
NVD
NVD
added 2 days ago7 views

CVE-2026-66746

Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return 0x0D or line feed 0x0A bytes into attacker-controlled input. Attackers can exploit percent-decoded query parameters reflecte...

5.4CVSS0.00241EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2 days ago30 views

CVE-2026-66746 Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection

Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return 0x0D or line feed 0x0A bytes into attacker-controlled input. Attackers can exploit percent-decoded query parameters reflecte...

5.4CVSS0.00241EPSS
SaveExploits1References2
CVE
CVE
added 2 days ago13 views

CVE-2026-66746

Rouille 0.4.0–3.6.2 contains an HTTP response splitting vulnerability. An attacker can inject CR/LF into attacker-controlled input, causing arbitrary response headers to be added via reflected percent-decoded query parameters or bare LF in Cookie headers into Set-Cookie headers. This enables cach...

5.4CVSS6AI score0.00241EPSS
SaveExploits1References2
EUVD
EUVD
added 2 days ago5 views

EUVD-2026-49889

Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return 0x0D or line feed 0x0A bytes into attacker-controlled input. Attackers can exploit percent-decoded query parameters reflecte...

5.4CVSS6AI score0.00241EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2 days ago3 views

CVE-2026-66746

Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return 0x0D or line feed 0x0A bytes into attacker-controlled input. Attackers can exploit percent-decoded query parameters reflecte...

5.4CVSS6AI score0.00241EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2 days ago6 views

PT-2026-65517

Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return 0x0D or line feed 0x0A bytes into attacker-controlled input. Attackers can exploit percent-decoded query parameters reflecte...

5.4CVSS6AI score0.00241EPSS
SaveExploits1References3
OSV
OSV
added 5 days ago5 views

MGASA-2026-0296 Updated yelp packages fix a security vulnerability

The updated packages fix a security vulnerability: Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications. CVE-2026-13601...

7.1CVSS5.8AI score0.0012EPSS
SaveExploits0References5
CVE
CVE
added 5 days ago13 views

CVE-2026-64391

The CVE-2026-64391 issue affects the Linux kernel ksmbd component, where alternate data streams (ADS) stored as xattrs were read/written using current task credentials via VFS xattr paths. The root cause is that ADS I/O did not use the credentials captured when the SMB handle was opened, allowing...

9.8CVSS5.7AI score0.00457EPSS
SaveExploits0References4
EUVD
EUVD
added 6 days ago7 views

EUVD-2026-48299

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure...

7.3CVSS5.8AI score0.0013EPSS
SaveExploits0References6
Rows per page
Query Builder