|
341
|
8.8 |
HIGH
Network
|
-
|
-
|
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Stored XSS.
This issue affects DivvyD…
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-5784
|
2026-05-7 23:42 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
342
|
9.6 |
CRITICAL
Network
|
-
|
-
|
Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross Site Request Forgery.
This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.
New
|
CWE-352
Origin Validation Error
|
CVE-2026-5791
|
2026-05-7 23:42 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
343
|
8.8 |
HIGH
Network
|
-
|
-
|
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross-Site Scripting (XSS).
This issue affec…
New
|
CWE-80
Basic XSS
|
CVE-2026-6002
|
2026-05-7 23:42 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344
|
7.7 |
HIGH
Network
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforcement. Browser press/type style interact…
New
|
CWE-862
Missing Authorization
|
CVE-2026-43580
|
2026-05-7 23:41 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345
|
9.6 |
CRITICAL
Adjacent
|
openclaw
|
openclaw
|
OpenClaw before 2026.4.10 contains an improper network binding vulnerability in the sandbox browser CDP relay that exposes Chrome DevTools Protocol on 0.0.0.0. Attackers can access the DevTools proto…
New
|
CWE-1188
Insecure Default Initialization of Resource
|
CVE-2026-43581
|
2026-05-7 23:41 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
346
|
9.1 |
CRITICAL
Network
|
x.org
redhat
|
x_server
enterprise_linux
|
A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit …
New
|
CWE-805
Buffer Access with Incorrect Length Value
|
CVE-2026-34002
|
2026-05-7 23:39 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347
|
8.1 |
HIGH
Network
|
google
|
chrome
|
Out of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-7981
|
2026-05-7 23:38 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348
|
9.1 |
CRITICAL
Network
|
x.org
redhat
|
x_server
enterprise_linux
|
A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an at…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-34000
|
2026-05-7 23:35 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349
|
6.5 |
MEDIUM
Network
|
djangoproject
|
django
|
An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
Response headers do not vary on cookies if a session is not modified, but `SESSION_SAVE_EVERY_REQUEST` is `True`. A remote attacker …
New
|
CWE-539
Use of Persistent Cookies Containing Sensitive Information
|
CVE-2026-35192
|
2026-05-7 23:20 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350
|
5.3 |
MEDIUM
Network
|
djangoproject
|
django
|
An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
ASGI requests with a missing or understated `Content-Length` header can bypass the `FILE_UPLOAD_MAX_MEMORY_SIZE` limit, potentially …
New
|
CWE-130
Improper Handling of Length Parameter Inconsistency
|
CVE-2026-5766
|
2026-05-7 23:16 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
