68322 matches found
CVE-2026-10870
creationtimestamp| type| source ---|---|--- 2026-06-04 23:31:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnirtinq6s2b...
CVE-2026-11240
Insufficient validation of untrusted input in Loader in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11229
Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device. Chromium security severity: Low...
CVE-2026-11120
Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11085
Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...
Improper Synchronization
Overview Affected versions of this package are vulnerable to Improper Synchronization in the process that forwards DoQ queries to UDP upstreams, where the DNS transaction ID txid is not preserved and is always set to 0, reducing entropy in the backend tuple. An attacker can increase the likelihoo...
GHSA-XGX4-4H9W-53PV AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle
Summary This report covers the client-triggered DoQ forwarding path in: - dnsproxy v0.81.2 adguard/dnsproxy:v0.81.2 - AdGuard Home v0.107.74 adguard/adguardhome:latest, image version label v0.107.74 The issue was reproduced on 2026-04-25 with the products configured through their documented DoQ...
GHSA-9392-PJ54-QQF8
creationtimestamp| type| source ---|---|--- 2026-06-04 19:40:55+00:00| seen| https://gist.github.com/alon710/8d83dcf8c5f6eaceac335292cf54a077 2026-06-04 19:50:59+00:00| seen| https://gist.github.com/alon710/94ad07ac90371ecb50e3be0d7c9cdb9e...
Shopware: Unauthorized Payment Trigger for Foreign Orders via /store-api/handle-payment
Summary The Shopware Store API endpoint /store-api/handle-payment contains an object-level authorization flaw that allows a low-privileged external user with a normal customer or guest context to trigger the payment flow for another user’s order by supplying a foreign orderId. The affected...
User Impersonation
Overview shopware/platform is a Shopware e-commerce core. Affected versions of this package are vulnerable to User Impersonation via the handle-payment endpoint. An attacker can trigger payment flows for orders belonging to other users by supplying a valid foreign orderId, potentially causing...
GHSA-VVGJ-X9JQ-8CJ9 vulnerabilities
Vulnerabilities for packages: kubo-fips, mediamtx-fips, kubedock, teleport-operator-fips, dkron, rke2-runtime-fips, k3s, kubernetes-dns-node-cache-fips, commercial-expanso-edge, rke2-runtime, spegel, coredns, kyverno-policy-reporter-ui, kyverno-policy-reporter, mediamtx, ipfs-cluster, teleport,...
MINI-798V-7QVM-3FVM
Bulletin has no description...
MINI-J2G6-GWC3-36JJ
Bulletin has no description...
MINI-53RR-RXGF-G8H7
Bulletin has no description...
GHSA-JH6H-V6MP-H22V milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery
A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kvcatalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack needs to be performed locally. The...
MINI-698V-HX2W-7H3H
Bulletin has no description...
CVE-2026-43986
creationtimestamp| type| source ---|---|--- 2026-06-04 18:05:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mni7mj5dvi25 2026-06-04 23:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3rzwzs22...
MINI-HP9H-R4VH-FX8V
Bulletin has no description...