The vulnerability of the Content Credentials SDK library lies in its insufficient validation of incoming requests, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Content Credentials SDK libraries, related to a countable loss of significance, allows attackers to trigger a service failure.

The vulnerability of the Content Credentials SDK libraries is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Content Credentials SDK libraries, related to errors in the certificate authentication process, allows attackers to circumvent existing security restrictions.

The vulnerability of the Content Credentials SDK libraries is related to errors in the certificate authentication process. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.

The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to bypass existing security mechanisms.

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

CVE-2026-76324: Improper Neutralization of Input During Web Page Generation

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could create a malicious Splunk Web tour and cause arbitrary JavaScript to run in the browser of another user when that user opens a crafted tour link. The JavaScript runs in the brows...

FreeBSD : podman -- podman quadlet install --replace does not fully replace the old file (01c15468-9b7b-11f1-a75c-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 01c15468-9b7b-11f1-a75c-589cfc10a551 advisory. The Podman developers report: When running podman quadlet install --replace to replace a Quadlet file, ...

PT-2026-78366

Name of the Vulnerable Software and Affected Versions Zoo versions prior to 4.1.64 Description An unauthenticated arbitrary file upload issue exists in the image element. The system accepts arbitrary files as long as the client-supplied Content-Type falls within the image MIME group Multipurpose...

CVE-2026-76395: Deserialization of Untrusted Data

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible because a model codec in Splunk AI Toolkit...

CVE-2026-68899: Unrestricted Upload of File with Dangerous Type

Wekan is open source kanban built with Meteor. Prior to 9.90, isFileValid in models/fileValidation.js used the Unix file command for content-based MIME detection, but detectMimeFromFile silently returned undefined when that binary was unavailable and the validation fell back to the...

CVE-2026-76367: Improper Neutralization of Input During Web Page Generation

In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that user opens the note. The stored Cross-Site Scripting XSS vulnerability is possible because Splunk SOAR can treat...

CVE-2026-74803: Unrestricted Upload of File with Dangerous Type

Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo 4.1.64 - The image element accepts arbitrary files when the client-supplied Content-Type falls within the image MIME group...

The vulnerability of the Content Credentials SDK libraries, related to a countable loss of significance, allows attackers to trigger a service failure.

The vulnerability of the Content Credentials SDK libraries is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Content Credentials SDK library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Content Credentials SDK library libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the Content Credentials SDK library, related to integer overflow, allows a malicious actor to cause a service failure.

The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Content Credentials SDK libraries, related to pointer dereferencing errors, allows attackers to trigger a service failure.

The vulnerability of the Content Credentials SDK libraries is related to errors in pointer assignment. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-61842: Exposure of Sensitive Information to an Unauthorized Actor

Grav is a file-based Web platform. Prior to 2.0.2, the Grav Twig content sandbox permits grav.offsetGet'config' to return the raw configuration object and permits jsonencode, printr, yamlencode, and string filters to serialize that object without passing through...

Linux Distros Unpatched Vulnerability : CVE-2026-75625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying on...

MINI-3VQQ-V4R3-2CG5

Bulletin has no description...

CVE-2026-52873

Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in index.js creates the partition:wyzie-redeem Electron session and registers an onHeadersReceived hook that removes the...