Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker...
CVE-2026-93379
Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolatio
#advisory
共收录 23421 条相关情报。
← 返回所有主题Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker...
CVE-2026-93380
Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the r
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging...
CVE-2026-93377
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote...
CVE-2026-93378
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised t
Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to...
CVE-2026-93373
Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code
A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a...
CVE-2026-76154
A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role
The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with...
CVE-2026-52483
The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BR_g8.10_1.11(
Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper...
CVE-2021-3030
Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme G
Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin...
CVE-2026-15815
Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plug
In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.
CVE-2025-55787
In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-49137
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-11314
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-57846
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the...
CVE-2026-92993
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-10594
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected...
CVE-2026-92992
A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown functio
Applications built on MongoDB Entity Framework Core Provider which place a database name in the...
CVE-2026-92757
Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may in
There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library...
CVE-2026-19477
There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application...
CVE-2026-92758
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive
Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on...
CVE-2026-92230
Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container thr