123022 matches found
CVE-2019-14439
creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:07+00:00| seen| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A 2026-09-03 00:00:57+00:00| published-proof-of-concept| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A...
CVE-2024-35585
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...
CSS Component Data Compromise
The CSS component vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
WebAppInstalls Component Compromise Data Compromise
The vulnerability in the WebAppInstalls component of Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Google Chrome Microsoft Edge Data Access
The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
CSS Component Data Compromise
The CSS component vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Canvas Component Sensitive Data Access
The vulnerability in the Canvas component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
Network Component Compromise Data Compromise
The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
Google Chrome Edge GetUserMedia Data Compromise
The vulnerability in the GetUserMedia component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
FedCM Component Data Compromise
The vulnerability in the FedCM web browser components of Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...
DeviceBoundSessionCredentials Component Sensitive Data Access
The vulnerability in the DeviceBoundSessionCredentials component of Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
Google Chrome Microsoft Edge Sensitive Data Access
The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
SVG Component Access Sensitive Data
The vulnerability in the SVG component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...
CVE-2024-35585
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...
EUVD-2024-55746
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...
CVE-2024-35585: Missing Authentication for Critical Function
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...
SQL Data Source Plugin: OOM DoS via $__timeGroup macro
An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...
CVE-2024-35585
Oxford Nanopore MinKNOW , a sequencing software used in nanopore-based genomic analysis, is vulnerable to weak authentication in versions before 24.06 . The application relies on a client's source IP address as its authentication mechanism, meaning an attacker who can spoof or originate traffic f...
PT-2026-84757
Name of the Vulnerable Software and Affected Versions Grafana versions prior to 12.4.10-1.1 Description An authenticated user with permissions to query a SQL data source can cause a denial of service by injecting the timeGroup macro through a WHERE clause. Because the regex-based macro parsing do...
CVE-2026-19475: Uncontrolled Resource Consumption
An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...