Astra Linux – Vulnerability in Chromium

Memory access out of bounds in WebHID in Google Chrome prior to version 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption through a malicious HID device. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Using “after free” in WebGPU in Google Chrome before version 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

CVE-2023-28148

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...

EUVD-2023-60643

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...

CVE-2026-42770 affecting package edk2 for versions less than 20240524git3e722403cd16-20

CVE-2026-42770 affecting package edk2 for versions less than 20240524git3e722403cd16-20. A patched version of the package is available...

CVE-2026-87933

A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...

CVE-2026-71380 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-71380 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

EUVD-2026-68791

Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...

@alancode95/core-prisma (1.0.0), @aliceo2/infologger (>=1.15.0, <=1.15.1) +39 more potentially affected by CVE-2026-55215 via mariadb (>=3.4.0, <=3.4.5)

mariadb NPM version =3.4.0, =1.15.0, =1.0.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =1.0.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =1.2.1, =2.1.0, =0.61.0, =0.93.0, =0.112.0 and more Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...

NPM: Whistle vulnerable to path traversal

NPM: Whistle vulnerable to path traversal vulnerability discovered by ? in WordPress Npm whistle versions 2.10.3...

MINI-MQMH-FFR5-85PG

Bulletin has no description...

MINI-X2HP-QH3Q-P6WP

Bulletin has no description...

MINI-W7VJ-3G8H-FQGM

Bulletin has no description...

MINI-47X5-49XH-W8M4

Bulletin has no description...

MINI-6W92-M35J-W97P

Bulletin has no description...

CVE-2026-63387

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdnsserverrequestformatresponse. The final-label check...

MINI-X3H7-93M2-639X

Bulletin has no description...

MINI-Q2M5-253V-7C7F

Bulletin has no description...

MINI-PFRQ-423P-H5W8

Bulletin has no description...

CVE-2026-16917

creationtimestamp| type| source ---|---|--- 2026-08-19 22:11:18+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqrfxi2v2b 2026-08-20 02:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti64evxbg25 2026-08-21 08:37:06+00:00| seen|...