3797 matches found
DEBIAN-CVE-2026-17775
Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
PHP 8.2.x < 8.2.33 Multiple Vulnerabilities SQLI
The version of PHP installed on the remote host is prior to 8.2.33. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.33 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8....
MINI-X5JH-M69C-86WC
Bulletin has no description...
MINI-CW43-M94F-QPCC
Bulletin has no description...
MINI-X9XR-398W-CJP9
Bulletin has no description...
MINI-JM2Q-RXWJ-MJPX
Bulletin has no description...
MINI-P684-WHFF-JG7V
Bulletin has no description...
MINI-4W94-RMX5-VGXH
Bulletin has no description...
CVE-2026-17497
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...
CVE-2026-17496 NoteGen chat preview XSS via unsanitized AI/skill HTML rendering
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt for example a...
CVE-2026-17496 NoteGen chat preview XSS via unsanitized AI/skill HTML rendering
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt for example a...
PT-2026-64811
Name of the Vulnerable Software and Affected Versions NoteGen versions prior to 0.32.0 Description Cross-site scripting occurs when AI chat responses are rendered using markdown-it with the html:true configuration and injected into the DOM via dangerouslySetInnerHTML in the chat-preview component...
MINI-QQHP-FW37-7CRP
Bulletin has no description...
ECHO-E22F-3A38-1187
Bulletin has no description...
MINI-X7H4-J322-3GQ4
Bulletin has no description...
PT-2026-64353
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur during the removal of a shared GPIO proxy's parent. This issue stems from an excessively wide critical section using a mutex embedded in the gpio shared entry...
MINI-WRXH-W927-CRR6
Bulletin has no description...
CGA-Q6JQ-FGC8-9Q59
Bulletin has no description...
