262248 matches found
PT-2026-50208
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description An inappropriate implementation in the Passwords component allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specific UI gestures on a...
PT-2026-50376
Name of the Vulnerable Software and Affected Versions HCL iControl affected versions not specified Description HCL iControl is affected by an inadequate session timeout issue. This occurs when a web application fails to automatically terminate user sessions after a period of inactivity, potential...
PT-2026-50434
Name of the Vulnerable Software and Affected Versions Dell PowerFlex Manager affected versions not specified Description Improper Access Control allows a low privileged attacker with remote access to potentially cause a denial of service, a condition where the system becomes unavailable to its...
Linux Distros Unpatched Vulnerability : CVE-2026-12457
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass...
CVE-2026-6253 affecting package cmake for versions less than 3.30.3-14
CVE-2026-6253 affecting package cmake for versions less than 3.30.3-14. A patched version of the package is available...
GHSA-9R5X-WG6M-X2RC Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication
Summary Gitea fails to enforce OAuth2 access token scopes when the token is submitted via HTTP Basic authentication instead of a Bearer token. An OAuth2 application granted only read:user can use the same token as Authorization: Basic base64:x-oauth-basic and perform write actions, including...
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +90 more potentially affected by CVE-2026-56317 via nuxt (>=3.0.0, <=3.20.1)
nuxt NPM version =3.0.0, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-56317 Source advisory: SNYK:JS-NUXT-17353899...
CVE-2026-22312
creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogoyat2ju2a 2026-06-16 21:43:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogreeehlr2g...
CVE-2026-35288
creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-17 09:09:05+00:00| seen|...
GHSA-JP82-JPQV-5VV3 vulnerabilities
Vulnerabilities for packages: airflow, airflow-core, tritonserver-backend-vllm-cuda-12.9, tritonserver-backend-vllm-cuda-13.0, prefect-fips, airflow-postgres-fips, prefect, nemo, semgrep, mlflow-fips, mlflow, litellm, kserve...
GHSA-63HW-FMQ6-XXG2 vulnerabilities
Vulnerabilities for packages: airflow, airflow-core, apache-beam-python-3.12-sdk, authentik, open-webui, mlflow, py3.13-scanner-test-libraries-aiohttp, authentik-fips, py3-vllm-cuda-12.4, py3-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, lmcache-cuda-12.8, request-1276,...
GHSA-XCGM-R5H9-7989 vulnerabilities
Vulnerabilities for packages: airflow, airflow-core, apache-beam-python-3.12-sdk, authentik, open-webui, mlflow, py3.13-scanner-test-libraries-aiohttp, authentik-fips, py3-vllm-cuda-12.4, py3-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, lmcache-cuda-12.8, request-1276,...
CVE-2026-53866
creationtimestamp| type| source ---|---|--- 2026-06-16 20:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moglm7xyvh2t 2026-06-16 21:28:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogqkrsawf2x...
CVE-2026-46974
...
CVE-2026-46976
Technical details are not publicly available in the provided documents for CVE-2026-46976. Monitor for updates from Oracle security alerts and CVE records.
CVE-2026-46973
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-46972
...
CVE-2026-46973
...
CVE-2026-46969
Technical details for CVE-2026-46969 are not publicly available in the provided documents. No affected products, vulnerable components, root cause, or remediation are specified. Monitor for updates from official sources.