EUVD-2026-119251

Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Select jet-form-builder-hierarchical-select allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder – Hierarchical Select: from n/a through...

CVE-2026-123861

The CrocoBlock JetFormBuilder – Hierarchical Select WordPress plugin (versions n/a through 1.0.10 ) is vulnerable to an Authorization Bypass Through User-Controlled Key (CWE-639). This flaw allows for Insecure Direct Object References (IDOR) due to Incorrectly Configured Access Control Security L...

CVE-2026-123861 WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Select jet-form-builder-hierarchical-select allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder – Hierarchical Select: from n/a through...

WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Nikiforos Bafas in WordPress Plugin JetFormBuilder – Hierarchical Select versions = 1.0.10...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open To avoid symlink-based pidfile clobbering, open the pidfile with ONOFOLLOW and validate it using fstat before locking or writing to it. Currently, the daemon uses a...

CVE-2026-121254

An information leak flaw was found in the Select component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562225118...

SUSE CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-121254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium...

DEBIAN-CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121254

An information leak vulnerability exists in the Select component of the Google Chrome browser in versions prior to 157.0.8103.38 . A remote attacker can exploit this flaw by hosting a crafted HTML page to obtain sensitive information from the user's system. This issue is categorized as a Medium s...

CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116481

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-115955

SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows authenticated users to abort the surreald process by triggering stack overflow on deeply nested values. Attackers can repeatedly run UPDATE statements wrapping a stored array in itself, then SELECT or EXPORT it,...

VulnCheck KEV: CVE-2015-7857

SQL injection vulnerability in the getListQuery function in administrator/components/comcontenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the listselect parameter to index.php...

Google Chrome Edge Select Component Forgery

The vulnerability in the Select component of Google Chrome and Microsoft Edge is related to improper handling of user interface information. Exploitation of this vulnerability enables a remote attacker to forge the contents of the address bar by using a specially crafted HTML page...

CLEANSTART-2024-XP77487 When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface

Security vulnerability affects the firefox package. When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface...

Linux Distros Unpatched Vulnerability : CVE-2026-116797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and...