|
921
|
6.5 |
MEDIUM
Network
|
team
|
net\
|
Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections.
The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj…
Update
|
CWE-93
CRLF Injection
|
CVE-2026-8722
|
2026-06-9 01:39 |
2026-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
922
|
7.7 |
HIGH
Local
|
google
|
chrome
|
Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium…
Update
|
CWE-20
Improper Input Validation
|
CVE-2026-11297
|
2026-06-9 01:37 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
923
|
7.5 |
HIGH
Network
|
rrwo
|
net\
|
Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses.
The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network range…
Update
|
CWE-674
CWE-1287
Uncontrolled Recursion
Improper Validation of Specified Type of Input
|
CVE-2026-49941
|
2026-06-9 01:37 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
924
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severi…
Update
|
CWE-269
Improper Privilege Management
|
CVE-2026-11295
|
2026-06-9 01:37 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
925
|
7.3 |
HIGH
Network
|
rrwo
|
net\
|
Net::CIDR::Set versions through 0.20 for Perl did not validate network masks.
The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661), or non-digits, wh…
Update
|
CWE-1289
Improper Validation of Unsafe Equivalence in Input
|
CVE-2026-49942
|
2026-06-9 01:37 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
926
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Inappropriate implementation in Android Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security …
Update
|
CWE-346
Origin Validation Error
|
CVE-2026-11291
|
2026-06-9 01:37 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
927
|
6.5 |
MEDIUM
Network
|
rrwo
|
net\
|
Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks.
Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This…
Update
|
CWE-1289
Improper Validation of Unsafe Equivalence in Input
|
CVE-2026-49940
|
2026-06-9 01:35 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
928
|
7.5 |
HIGH
Network
|
sanbeg
|
etsy\
|
Etsy::StatsD versions through 1.002002 for Perl allow metric injections.
The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inj…
Update
|
CWE-93
CRLF Injection
|
CVE-2026-46741
|
2026-06-9 01:33 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
929
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions v…
Update
|
CWE-20
CWE-602
Improper Input Validation
Client-Side Enforcement of Server-Side Security
|
CVE-2026-11287
|
2026-06-9 01:31 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
930
|
5.3 |
MEDIUM
Network
|
cosimo
|
net\
|
Net::Statsd versions before 0.13 for Perl allow metric injections.
The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional st…
Update
|
CWE-93
CRLF Injection
|
CVE-2026-46739
|
2026-06-9 01:31 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
