|
541
|
7.5 |
HIGH
Network
|
-
|
-
|
Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. This vulnerability allows attackers to ca…
New
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-36786
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
542
|
8.8 |
HIGH
Network
|
-
|
-
|
Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically del…
New
|
CWE-285
CWE-613
Improper Authorization
Insufficient Session Expiration
|
CVE-2026-46656
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
543
|
7.1 |
HIGH
Network
|
-
|
-
|
Bludit is a content management system. Versions prior to 3.22.0 have a vulnerability in the user management logic that allows deactivated accounts to maintain access via persistent authentication tok…
New
|
CWE-212
CWE-613
Improper Removal of Sensitive Information Before Storage or Transfer
Insufficient Session Expiration
|
CVE-2026-46657
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
544
|
8.7 |
HIGH
Network
|
-
|
-
|
A Stored Cross-Site Scripting vulnerability in Vinna Process Monitor Version 4.0 Service Pack 1 (Build 63255) allows an authenticated remote attacker with low privileges to inject malicious JavaScrip…
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-41031
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
545
|
- |
|
-
|
-
|
When creating an export of all reusable media, the secrets of connected
gift cards were included in the export even if the user creating the
export does not have permission to view gift cards. This…
New
|
CWE-280
Improper Handling of Insufficient Permissions or Privileges
|
CVE-2026-11764
|
2026-06-9 22:57 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
546
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)
Update
|
CWE-693
Protection Mechanism Failure
|
CVE-2026-11292
|
2026-06-9 22:54 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
547
|
9.6 |
CRITICAL
Network
|
google
|
chrome
|
Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
Update
|
CWE-416
Use After Free
|
CVE-2026-11293
|
2026-06-9 22:53 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
548
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Server allows an authenticated user with write access to a vault to execute arbitra…
New
|
CWE-78
OS Command
|
CVE-2026-10544
|
2026-06-9 22:53 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
549
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privileged user to obtain cleartext credentials for configured ticketing integrations v…
New
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2026-10786
|
2026-06-9 22:53 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
550
|
7.6 |
HIGH
Adjacent
|
-
|
-
|
A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation (via chan_ops.alloc_buf…
New
|
CWE-787
Out-of-bounds Write
|
CVE-2026-5068
|
2026-06-9 22:53 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
