Google Chrome Use-After-Free DoS

The vulnerability in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

Headless web browsers DoS

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...

BrowserTag Component DoS

The vulnerability of the BrowserTag component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Password Component Access Confidential Data

The vulnerability of the Password component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data through a specially created HTML page...

MongoDB Privilege Escalation

The vulnerability of the updateUser command in the MongoDB database management system is related to incorrect input of configuration data. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

Gitea SSRF

The vulnerability of the Git repository management system Gitea is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform a SSRF attack remotely...

NLTK validate_network_url SSRF

The vulnerability of the validatenetworkurl function in the NLTK library for symbolic and statistical processing related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

Data Compromise component Confidential Data Access

The vulnerability of the Privacy component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data...

Hikvision CSMP iSecure Center Arbitrary Command Execution

The vulnerability of the integrated security management platform Hikvision CSMP iSecure Center lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands in JSON data...

Oracle Linux 9 : ELSA-2026-61247-0: / libxml2 (ELSA-2026-612470)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-612470 advisory. - Fix CVE-2026-11979 RHEL-215568 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84326

An uninitialized resource in the V8 engine of Google Chrome and Microsoft Edge (Chromium-based) allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability affects versions of Chrome prior to 152.0.7977.75 . Public exploits are available for t...

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84423

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-84423 Casdoor upload-resource API resource.go missing authentication

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-84423 Casdoor upload-resource API resource.go missing authentication

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-84423 Casdoor upload-resource API resource.go missing authentication

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-84288

A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...

CVE-2026-84289

A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function listtools of the file tools/mcptool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The...

CVE-2026-84289

A vulnerability in NousResearch hermes-agent up to version 0.18.2 affects the list_tools function in tools/mcp_tool.py (MCP Tool component). The root cause is uncontrolled memory allocation , which can lead to a resource amplification denial-of-service when manipulated remotely. The CVSS 4.0 scor...