Export limit exceeded: 383474 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 383474 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 383474 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (383474 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-79147 | 1 Google | 1 Chrome | 2026-08-26 | 5.3 Medium |
| Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79005 | 1 Google | 1 Chrome | 2026-08-26 | 6.5 Medium |
| Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-78946 | 1 Google | 1 Chrome | 2026-08-26 | 4.3 Medium |
| Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-78896 | 1 Google | 1 Chrome | 2026-08-26 | 4.3 Medium |
| Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79018 | 1 Google | 1 Chrome | 2026-08-26 | 6.5 Medium |
| Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79112 | 1 Google | 1 Chrome | 2026-08-26 | 6.5 Medium |
| Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79246 | 1 Google | 1 Chrome | 2026-08-26 | 6.5 Medium |
| Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79148 | 1 Google | 1 Chrome | 2026-08-26 | 9.1 Critical |
| Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low) | ||||
| CVE-2026-79125 | 1 Google | 1 Chrome | 2026-08-26 | 6.5 Medium |
| Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79105 | 1 Google | 1 Chrome | 2026-08-26 | 4.3 Medium |
| Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79225 | 1 Google | 1 Chrome | 2026-08-26 | 4.3 Medium |
| Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via UI Interaction. (Chromium security severity: Low) | ||||
| CVE-2026-79133 | 1 Google | 1 Chrome | 2026-08-26 | 6.5 Medium |
| Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79179 | 1 Google | 1 Chrome | 2026-08-26 | 6.5 Medium |
| Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-16642 | 2026-08-26 | 5.7 Medium | ||
| Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*. | ||||
| CVE-2026-26445 | 2026-08-26 | N/A | ||
| stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll (EPOLLET) and MSG_PEEK in recv(), causes sockets to enter a permanent half-read state. When enough such connections accumulate, the broker stops receiving any further epoll events for those sockets and eventually hangs in epoll_wait, effectively refusing to process new messages. | ||||
| CVE-2026-26446 | 2026-08-26 | N/A | ||
| Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closing the socket at specific points. | ||||
| CVE-2026-49809 | 2026-08-26 | 6.5 Medium | ||
| Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. | ||||
| CVE-2026-79938 | 2026-08-26 | 7.6 High | ||
| Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. | ||||
| CVE-2026-66003 | 1 Frappe | 1 Frappe | 2026-08-26 | N/A |
| Frappe is a full-stack web application framework written in Python and JavaScript. Prior to version 15.115.0, an access control bypass in the REST API allows a user to read data from Linked DocTypes that they are not authorized to access. When a document references another document through a Link field, the framework does not consistently enforce the linked DocType's own permissions when the record is retrieved through the REST API, so a low-privileged authenticated user can obtain fields from linked records outside their permitted scope. This issue is fixed in version 15.115.0. | ||||
| CVE-2026-21810 | 2026-08-26 | 4.4 Medium | ||
| HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary. | ||||