The vulnerability of the Windows operating system’s kernel, related to insufficient protection of registration data, allows attackers to disclose protected information.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Windows Kernel component of the Windows operating system allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the Windows Kernel component of the Windows operating system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Windows operating system’s Web Account Manager allows a hacker to disclose protected information.

The vulnerability of the Windows operating system’s Web Account Manager is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

The vulnerability of the Shell command shell in Windows operating systems allows attackers to bypass security restrictions.

The vulnerability of the Shell command shell in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to circumvent security restrictions remotely...

The vulnerability of the encryption mechanism for flash memory (XTS-AES with pseudo-rounds) in the ESP32-C5 chip allows a hacker to recover the AES keys.

The vulnerability of the XTS-AES encryption mechanism with pseudo-rounds on the ESP32-C5 chip is related to the lack of protection for service data. Exploiting this vulnerability allows a hacker to recover the AES keys...

PT-2026-40494

Уязвимость программного средства защиты данных посредством резервного копирования PowerProtect Data Domain операционных систем Dell EMC Data Domain Operating System DD OS связана с ошибками при обработке информации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получи...

The vulnerability of the FortiADC application delivery controller, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FortiADC application delivery controller is related to insufficient protection of operational data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted HTTP and HTTPS...

The vulnerability of the iFrameSandbox component in Google Chrome allows a hacker to bypass security restrictions.

The vulnerability of the iFrameSandbox component in Google Chrome is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

The vulnerability of the Downloads component of the Google Chrome browser, which allows a hacker to circumvent security restrictions

The vulnerability of the Downloads component of the Google Chrome browser is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of Google Chrome’s ServiceWorkers component, which allows a hacker to bypass security restrictions

The vulnerability of Google Chrome’s ServiceWorkers component is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass security restrictions through a specially created HTML page...

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass security restrictions.

The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to a data protection mechanism flaw. Exploiting this vulnerability allows an attacker to bypass security restrictions by downloading malicious extensions remotely...

openSUSE 16 Security Update : tigervnc (openSUSE-SU-2026:20465-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20465-1 advisory. - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. bsc1260871 Tenable has...

WordPress plugin DSGVO Google Web Fonts GDPR 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

PT-2026-31095

Name of the Vulnerable Software and Affected Versions DSGVO Google Web Fonts GDPR plugin for WordPress versions up to and including 1.1 Description The DSGVO Google Web Fonts GDPR plugin for WordPress is susceptible to arbitrary file upload due to the absence of file type validation in the...

The vulnerability of the setGameSpeedCfg function in the microprogramming software of TOTOLink A7100RU allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setGameSpeedCfg function in the microprogramming software of TOTOLink A7100RU relates to the lack of measures taken to protect data at the control level. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, a...

The vulnerability of Dell EMC AppSync’s data storage and protection software lies in its lack of mechanisms for handling symbolic links. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Dell EMC AppSync data storage and protection software is related to deficiencies in the mechanism for handling symbolic links. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

PT-2026-30972

OrangeHRM is a comprehensive human resource management HRM system. From 5.0 to 5.8, OrangeHRM Open Source encrypts certain sensitive fields with AES in ECB mode, which preserves block-aligned plaintext patterns in ciphertext and enables pattern disclosure against stored data. This vulnerability i...

The vulnerability of the cpp-httplib library, related to insufficient protection of service data, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the cpp-httplib library is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the WebKit component in the Safari browser for operating systems macOS, iOS, iPadOS, and visionOS allows attackers to circumvent security restrictions.

The vulnerability of the WebKit component in the Safari browser for operating systems macOS, iOS, iPadOS, and visionOS is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, arises from improper encoding or escaping of output data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, is related to improper coding or escape sequences used to protect output data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...