CVE-2026-81202

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

CVE-2026-65641

CVE-2026-65641 is a Critical (CVSS 9.3) vulnerability in Veeam ONE affecting all version 13 builds from 13.1.0.7034 and earlier (12.x is not affected). An unauthenticated network attacker can coerce the Veeam ONE service account into performing SMB (NTLM) authentication , potentially exposing the...

CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

bind: BIND: Denial of Service via specially crafted DNS messages

A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

EUVD-2026-66669

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...

EUVD-2026-66656

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-66641

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

DRUPAL-CONTRIB-2026-106

This module integrates Drupal Commerce with the CyberSource payment gateway. The module does not correctly verify the integrity of data returned by the payment provider. A timing attack could allow an attacker to trick the site into registering that payment has been received even if it hasn't. Th...

CVE-2020-15878

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the address parameter in the /ajaxtable.php API endpoint...

CVE-2026-79288

A flaw was found in Google Chrome's Autofill feature on Android. Improper input validation allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page. This vulnerability could lead to the exposure of sensitive user data...

CVE-2026-79077

A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, the attacker can exploit this flaw to gain unauthorized access to restricted parts of the system...

CVE-2026-79223

A flaw was found in Chromium. An integer overflow vulnerability allows a remote attacker to read sensitive memory within the sandbox. This can be exploited by tricking a user into opening a specially crafted file, potentially leading to the disclosure of confidential information...

CVE-2026-79146

A flaw was found in CustomTabs in Google Chrome. A local attacker could exploit this vulnerability through a co-installed application. This could result in an information leak, allowing the attacker to access cross-origin data...

CVE-2026-79291

A flaw was found in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-79264

A flaw was found in Google Chrome. This vulnerability, caused by incorrect reference resolution in the Preload component, allows a remote attacker to bypass the web origin policy. By crafting a malicious HTML page, an attacker could potentially access sensitive information or perform unauthorized...

CVE-2026-79024

A flaw was found in the ServiceWorker component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive user information...

CVE-2026-79016

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in how Scalable Vector Graphics SVG are handled by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosu...

CVE-2026-78912

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation, allowing the attacker to spoof UI elements and potentially deceive users...