209872 matches found
Coder input validation error vulnerability
Coder 2.0.0 to 2.34.8 versions had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of cleanup of the r.URL.Path value in handleAPIKeySmuggling. It was vulnerable to open redirection attacks, allowing attackers to redirect users to the attacker’s site b...
WordPress PAYCOMET for WooCommerce: Cross-site Script Vulnerability
WordPress PAYCOMET for WooCommerce versions 5.45 and earlier have a cross-site scripting vulnerability. This vulnerability stems from improper input validation during page generation, which may lead to reflection-type cross-site scripting attacks...
Coder input validation error vulnerability
Versions of Coder 2.3.1 to 2.14.4, 2.15.x versions before 2.15.3, and 2.16.0 to 2.16.1 contain a vulnerability related to input validation errors. This vulnerability stems from improper cleaning of the redirect query parameters on the login page. It may lead to open redirection attacks. Attackers...
Coder Trust Management Vulnerabilities
Versions of Coder prior to 2.29.20, 2.33.0 through 2.33.12, 2.34.0 through 2.34.8, and 2.35.0 through 2.35.4 had a trust management vulnerability. This vulnerability stemmed from improper hostname validation in the GetWorkspaceProxyByHostname function. The SIMILAR TO pattern execution prefix...
Thorsten Rinne phpMyFAQ input validation vulnerability
Thorsten Rinne’s phpMyFAQ versions from 4.2.0-alpha to 4.2.0-beta have a vulnerability related to input validation. This vulnerability stems from a storage-side cross-site scripting vulnerability in SvgSanitizer. Attackers can split script tags around removed markers, allowing for reassembly afte...
WordPress User Registration & Membership Cross-Site Request Forgery Vulnerability
WordPress User Registration & Membership versions 5.2.8 and earlier have a cross-site request forgeing vulnerability. This vulnerability stems from a lack of proper nonce validation in the triggerbulkaction function. Attackers can bypass the nonce check in triggerqueryactions by providing an empt...
CVE-2026-110916
An improper input validation flaw was found in the Desktop component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501886301...
Signature validation bypass
More info at https://github.com/litesaml/lightsaml/security/advisories/GHSA-rm7m-7jq4-gw46...
Chromium CVE-2026-106263: Improper input validation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-106226: Improper input validation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-106185: Improper input validation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-106396: Improper input validation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-106346: Improper state validation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-106343: Improper state validation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-106331: Improper input validation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-106299: Improper input validation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
DEBIAN-CVE-2026-111555
A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with...
CVE-2026-111555
A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with...
AZL-109739 CVE-2026-111555 affecting package luksmeta 9-8
A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with...
CVE-2026-111555
A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with...