61497 matches found
CVE-2026-75432
A flaw was found in yaml-cpp. A remote attacker could exploit this vulnerability by manipulating the scanner component's handling of indentation, leading to the disclosure of sensitive information...
CVE-2026-18872
IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to stored cross-site scripting CWE-79 in the FTM UI NetworkAcknowledgement React component NetworkAcknowledgement.jsx:42. A malicious actor can inject script into stored network acknowledgement data that executes in...
PT-2026-105058
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component segment to an atom with rabbit data coercion:to atom/1 in lookup component/1 deps/rabbit/src/rabbit runtime parameters.erl, creating a new atom for any...
Google Chrome Microsoft Edge Code Execution
The Input component vulnerability in Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
Google Chrome Microsoft Edge DoS
The vulnerability in the Certificate component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
Google Chrome Microsoft Edge DoS
The vulnerability in the Navigation component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Network component Code Execution
The Network component vulnerability in Google Chrome and Microsoft Edge is related to use-after-free memory usage. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
CVE-2026-18872: Improper Neutralization of Input During Web Page Generation
IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to stored cross-site scripting CWE-79 in the FTM UI NetworkAcknowledgement React component NetworkAcknowledgement.jsx:42. A malicious actor can inject script into stored network acknowledgement data that executes in...
Linux Distros Unpatched Vulnerability : CVE-2026-92021
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16. CVE-2026-92021 Note that Ness...
Linux Distros Unpatched Vulnerability : CVE-2026-92018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3,...
Linux Distros Unpatched Vulnerability : CVE-2026-92028
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3,...
Linux Distros Unpatched Vulnerability : CVE-2026-92025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3,...
Linux Distros Unpatched Vulnerability : CVE-2026-92026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird...
Linux Distros Unpatched Vulnerability : CVE-2026-92029
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...
Linux Distros Unpatched Vulnerability : CVE-2026-92024
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...
Linux Distros Unpatched Vulnerability : CVE-2026-92032
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird...
Linux Distros Unpatched Vulnerability : CVE-2026-92030
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3,...
Linux Distros Unpatched Vulnerability : CVE-2026-92023
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...
homeassistant-stubs (2022.6.4), pytest-homeassistant-custom-component (0.9.14) potentially affected by CVE-2025-62172 +1 more via homeassistant (2022.6.4)
homeassistant PYPI version 2022.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.4 - pytest-homeassistant-custom-component 0.9.14 Source cves: CVE-2025-62172, CVE-2026-91130 Source...