Inappropriate implementation in MediaCapture in Google Chrome on Mac prior to 149.0.7827.103...
CVE-2026-11685
Inappropriate implementation in MediaCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker t
#severity:medium
共收录 5584 条相关情报。
← 返回所有主题Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote...
CVE-2026-11665
Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-o
Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote...
CVE-2026-11669
Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compr
Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a local attacker to...
CVE-2026-11628
Use after free in Ozone in Google Chrome prior to 149.0.7827.103 allowed a local attacker to potentially exploit heap co
Dulwich has unbounded memory allocation in receive-pack from crafted thin packs
CVE-2026-47734
## Impact An uncontrolled-resource-consumption (memory exhaustion) denial-of-service vulnerability (CWE-400 / CWE-789).
FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions
CVE-2026-47721
## Summary An authorization issue in the Scheduler API allowed authenticated non-admin users to create or modify schedu
FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString
CVE-2026-47720
## Summary The TDengine DAQ storage connector's `escapeTdString` at `server/runtime/storage/tdengine/index.js:10` doubl
Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications
CVE-2026-47693
Description: ### Summary Poweradmin v4.4.0 is vulnerable to CSV Injection (Formula Injection) in its log export functi
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
CVE-2026-47244
### Impact DefaultHttp2Connection.DefaultEndpoint initialises maxActiveStreams/maxStreams to Integer.MAX_VALUE, and Http
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
CVE-2026-45673
### Summary Netty's DNS resolver uses a predictable PRNG for generating DNS transaction IDs and defaults to a static UDP
Netty: Unix-socket fd receive leaks descriptors when peer sends two at once
CVE-2026-45536
netty_unix_socket_recvFd sets msg_control to `char control[CMSG_SPACE(sizeof(int))]` (line 940) — 24 bytes on 64-bit Lin
actual Allows Electron to Run As Node
CVE-2026-42890
## Summary A electron run as node vulnerability was identified in `actual` (macOS application, version `25.x (Electron
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The...
CVE-2026-11482
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unkno
WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that...
CVE-2023-54351
WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attac
WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that...
CVE-2021-47983
WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated a
WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability...
CVE-2021-47984
WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated
WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows...
CVE-2022-50953
WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attack
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This...
CVE-2026-11472
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function
A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list...
CVE-2026-11473
A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file Advicefeedb
A security flaw has been discovered in Kushan2k student-management-system up to...
CVE-2026-11474
A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a