Lucene search
+L

2108 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/29 12:00 a.m.•2 views

CVE-2026-5042: Stack-based Buffer Overflow

A security flaw has been discovered in Belkin F9K1122 1.00.33. The affected element is the function formCrossBandSwitch of the file /goform/formCrossBandSwitch of the component Parameter Handler. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be...

9CVSS8.2AI score0.01058EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/28 12:00 a.m.•36 views

PT-2026-28752

Name of the Vulnerable Software and Affected Versions Belkin F9K1122 version 1.00.33 Description A security issue has been identified in Belkin F9K1122 version 1.00.33. The formSetSystemSettings function within the Setting Handler component, located in the /goform/formSetSystemSettings file, is...

9CVSS6.3AI score0.01058EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2026/03/27 2:26 p.m.•22 views

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

8.8CVSS8.6AI score0.01738EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/03/27 2:25 p.m.•16 views

CVE-2021-27465

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

6.1CVSS6AI score0.00642EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/27 12:00 a.m.•17 views

PT-2026-46766

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in Extensions allows a remote attacker who has already compromised the renderer process to perform privilege escalation using a crafted HTML page...

7.6CVSS7.1AI score0.00221EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/03/26 3:17 p.m.•10 views

CVE-2026-32403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in toocheke Toocheke Companion toocheke-companion allows DOM-Based XSS.This issue affects Toocheke Companion: from n/a through = 1.194...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:16 p.m.•17 views

CVE-2026-20691

A flaw was found in WebKitGTK. A maliciously crafted web page can cause an authorization issue due to improper state management and may be able to fingerprint the user. Mitigation Do not visit untrusted web pages or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the...

4.3CVSS5.8AI score0.00276EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/03/26 3:06 p.m.•15 views

CVE-2026-4220

A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /SetWebpagePic.jsp. The manipulation of the argument targetPath/Suffix leads to unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS6.6AI score0.00513EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 2:58 p.m.•14 views

CVE-2026-4566

A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be...

9CVSS8.1AI score0.01058EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/03/26 2:58 p.m.•15 views

CVE-2026-4167

A vulnerability was determined in Belkin F9K1122 1.00.33. This affects the function formReboot of the file /goform/formReboot. This manipulation of the argument webpage causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be...

9CVSS8AI score0.00805EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/25 1:17 a.m.•15 views

CVE-2026-20691

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the user...

4.3CVSS0.00276EPSS
SaveExploits0References5
CVE
CVE
•added 2026/03/25 12:35 a.m.•63 views

CVE-2026-20691

An authorization issue exists in Safari , iOS , iPadOS , macOS Tahoe , visionOS , and watchOS due to improper state management. A maliciously crafted webpage could exploit this vulnerability to fingerprint the user . The issue has been addressed in versions 26.4 across these platforms. Additional...

4.3CVSS5.9AI score0.00276EPSS
SaveExploits0References5Affected Software6
BDU FSTEC
BDU FSTEC
•added 2026/03/25 12:00 a.m.•17 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

10CVSS7.9AI score0.0033EPSS
SaveExploits0References11Affected Software7
attackerkb
attackerkb
•added 2026/03/24 12:24 a.m.•27 views

CVE-2026-4676

Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.5AI score0.00345EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/24 12:00 a.m.•29 views

PT-2026-27544

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Tahoe versions prior to 26.4 visionOS versions prior to 26.4 watchOS versions prior to 26.4 Description An authorization issue existed due to improved...

8.8CVSS6.6AI score0.0072EPSS
SaveExploits0References139
Circl
Circl
•added 2026/03/23 3:16 a.m.•21 views

CVE-2026-4569

creationtimestamp| type| source ---|---|--- 2026-03-23 03:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4569...

6.5CVSS6.7AI score0.0037EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/03/23 1:30 a.m.•7 views

CVE-2026-4566 Belkin F9K1122 formWISP5G stack-based overflow

A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be...

9CVSS8.1AI score0.01058EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/23 1:30 a.m.•46 views

CVE-2026-4566 Belkin F9K1122 formWISP5G stack-based overflow

A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be...

9CVSS0.01058EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/03/23 1:30 a.m.•13 views

EUVD-2026-14347

A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be...

9CVSS6.5AI score0.01058EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/20 1:34 a.m.•64 views

CVE-2026-4443

A heap buffer overflow in the WebAudio component of Google Chrome (and potentially Microsoft Edge ) allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability affects versions prior to 146.0.7680.153 . Remediation includes upgrading to version ...

8.8CVSS8.8AI score0.00546EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder