CVE Intelligence
Início / CVEs

Base de CVEs

Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.

Severidade
Limpar

2.174 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2026-77543 Crítica · 9.9 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77542 Crítica · 9.1 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UID Enterprise Agent
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.
CVE-2026-77540 Crítica · 9.1 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi OS Server
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.
CVE-2026-77539 Crítica · 9.1 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi OS Server
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.
CVE-2026-77537 Crítica · 10.0 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Protect Application
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-77535 Crítica · 9.1 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Network Application
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device.
CVE-2026-77533 Crítica · 9.9 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Protect Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-78237 Alta · 7.8 CWE-20 26/08/2026
Insufficient input validation in Admin By Request (ABR)
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.
CVE-2026-18261 Média · 5.7 CWE-20 25/08/2026
Powerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.
CVE-2026-16643 Média · 5.7 CWE-20 25/08/2026
Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.
CVE-2026-16642 Média · 5.7 CWE-20 25/08/2026
Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.
CVE-2026-16641 Crítica · 9.8 CWE-20 25/08/2026
Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.
CVE-2026-15088 Média · 5.7 CWE-20 25/08/2026
Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.
CVE-2026-65637 Crítica · 9.8 CWE-20 25/08/2026
Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-79288 Média · 6.5 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79272 Baixa · 3.1 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79260 Média · 6.5 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79259 Média · 4.3 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Medium)
CVE-2026-79255 Baixa · 3.1 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79253 Média · 6.5 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79251 Média · 4.3 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79243 Média · 6.5 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79230 Alta · 8.8 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79214 Média · 4.3 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79203 Baixa · 3.1 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)