CWE-203

CWE-203 · 4 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-203, highest CVSS first.

  1. MEDIUM 5.3CVE-2026-917252026-09-15

    Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

    chrome

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-917142026-09-15

    Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

    chrome

    AI risk analysis on Exploit-DB.ai →

  3. LOW 3.7CVE-2026-95270public PoC2026-09-22

    A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function check_password of the file changedetectionio/flask_app.py of the component Hash Comparison. This manipulation of the argument Password causes observable tim…

    AI risk analysis on Exploit-DB.ai →

  4. UNSCOREDCVE-2026-84461public PoC2026-09-25

    Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the two-factor login step let an attacker try unlimited password guesses for any account without triggering Zammad's normal lockout or rate limiting. The response also revealed…

    AI risk analysis on Exploit-DB.ai →