216973 matches found
The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Downloads component in the Google Chrome browser allows attackers to perform spear-phishing attacks.
The vulnerability of the Downloads component in the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...
PT-2026-67542
Name of the Vulnerable Software and Affected Versions Tenable Sensor Proxy versions prior to 1.4.2 Description A flaw in Tenable Sensor Proxy enables a remote attacker to execute code with elevated privileges. This is achieved by tricking an operator into connecting the sensor to a host controlle...
PT-2026-67560
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
Linux Distros Unpatched Vulnerability : CVE-2026-18477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory...
PT-2026-67461
A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow...
The vulnerability of the RDP client FreeRDP, related to buffer overflow in dynamic memory, allows a hacker to cause a service failure.
The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Google Chrome browser’s Navigation function allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Google Chrome browser’s Navigation function is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Google Chrome’s GPU component, which allows a hacker to trigger a service failure
The vulnerability of Google Chrome’s GPU component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Google Chrome’s fullscreen mode allows attackers to carry out spoofing attacks.
The vulnerability of Google Chrome’s fullscreen mode is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...
The vulnerability of Google Chrome’s FileSystem component, which allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s FileSystem component is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-67387
An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...
PT-2026-67485
Name of the Vulnerable Software and Affected Versions Amazon MQ MCP Server awslabs.amazon-mq-mcp-server versions prior to 2.0.24 Description Improper restriction of intended endpoints in the RabbitMQ broker connection tools may allow a remote unauthenticated actor to obtain Amazon MQ for RabbitMQ...
PT-2026-67429
Name of the Vulnerable Software and Affected Versions GNU tar affected versions not specified Description A TOCTOU Time-of-Check Time-of-Use issue exists in the incremental dumpdir X rename handling. This occurs when a local attacker with write access to a directory being backed up can influence...
PT-2026-67019
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
ROS-20260803-73-0011
The vulnerability of the ngxhttpssimodule module in NGINX Plus and NGINX Open Source HTTP servers relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to modify the memory contents of the working process or cause service failures...
The vulnerability of the SiteIsolation component in the Google Chrome browser allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s SiteIsolation component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
EUVD-2026-52484
Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...
