2022 matches found
CVE-2025-71264
Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service client crash...
CVE-2026-3873
Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0...
GO-2026-4683 OliveTin Vulnerable to Unauthorized Action Output Disclosure via EventStream in github.com/OliveTin/OliveTin
OliveTin Vulnerable to Unauthorized Action Output Disclosure via EventStream in github.com/OliveTin/OliveTin. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fro...
GO-2026-4687 OliveTin's email argument makes compliance harder, enables log injection in github.com/OliveTin/OliveTin
OliveTin's email argument makes compliance harder, enables log injection in github.com/OliveTin/OliveTin. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
DEBIAN-CVE-2026-3925
Incorrect security UI in LookalikeChecks in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-3922
Use after free in MediaStream in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-3932
CVE-2026-3932 : Insufficient policy enforcement in PDF handling within Google Chrome on Android (Chromium core) allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected component is the PDF policy enforcement in Chromium/Chrome prior to version 146.0.7680.71 . ...
CVE-2026-3923
CVE-2026-3923 describes a use-after-free in WebMIDI within Google Chrome/Chromium before 146.0.7680.71, potentially enabling heap corruption via a crafted HTML page. Affected: Chrome/Chromium WebMIDI. Impact: high (remote, heap corruption). Remediation: upgrade to Chrome/Chromium 146.0.7680.71 or...
CVE-2026-3918
Use after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-3913
CVE-2026-3913 is a heap buffer overflow in WebML of Google Chrome, fixed in Chrome 146.0.7680.71 (and associated packaging for Debian). The vulnerability allows remote heap corruption via a crafted HTML page. Affected component: WebML in Chromium/Chrome. Root cause: heap buffer overflow. Impact: ...
CVE-2026-30868
OPNsense/CVE-2026-30868 is a CSRF flaw in the FreeBSD-based firewall platform where multiple MVC API endpoints allow state-changing actions via HTTP GET without CSRF protection. The CSRF validation in ApiControllerBase applies only to POST/PUT/DELETE, enabling an authenticated user to trigger pri...
Dell Alienware Command Center 访问控制错误漏洞
Dell Alienware Command Center is a package manager from Dell USA. An access control error vulnerability exists in Dell Alienware Command Center versions prior to 6.12.24.0. The vulnerability stems from improper access control and can be exploited by an attacker to cause a denial of service...
PT-2026-29458
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A use after free issue exists in the WebCodecs component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...
CVE-2026-23135 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23135 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
EUVD-2026-10507
Memory safety bugs present in Firefox 148.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 148.0.2...
CVE-2026-3483
An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges...
CVE-2026-2339 RCE in TUBITAK BILGEM's Liderahenk
Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection. This issue affects Liderahenk: before 3.5.1...
CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21
CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...
WordPress plugin Wueen 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
