The vulnerability of the USB component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause service interruptions through a specially created HTML page...

The vulnerability of the Privacy component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data.

The vulnerability of the Privacy component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data...

The vulnerability of Google Lens components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of Google Lens components in Google Chrome and Microsoft Edge browsers is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created HTML page...

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Blink component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Blink component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

The vulnerability of the Sandbox component in Google Chrome and Microsoft Edge web browsers allows a violator to trigger a service failure.

The vulnerability of the Sandbox component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability in the Security component of Firefox web browsers, Firefox ESR, and the Thunderbird email client allows attackers to access confidential data and compromise data integrity.

The vulnerability of the Security component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966x_ethtool.c, drivers/net/thernet/microchip/lan966x/lan966x_main.c, and drivers/net/thernet/microchip/lan966x/lan966x_vcap_impl.c of the Linux operating system’s Ethernet network adapter drivers allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966xethtool.c, drivers/net/thernet/microchip/lan966x/lan966xmain.c, and drivers/net/thernet/microchip/lan966x/lan966xvcapimpl.c files of the Linux kernel’s Ethernet network adapter drivers are related to improper resource lockin...

MINI-6VGX-C24M-5JJG

Bulletin has no description...

EUVD-2026-54229

diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of any entity and returns those values for all rows, with no field or entity allowlist. The only guard, relatedDataSecurityCheck, returns true unconditionally, so any authenticated...

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-13268

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2026-60321

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-55082 DHIS2 SQL injection in SQL View filter values

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL. An authenticated user with acces...

PT-2026-62327

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-35145 HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability.

HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport Security HSTS policy within its responses, which could allow a remote attacker to downgrade the communication channel to an unencrypted...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

Adalo Database API Enables Cross-App User Data Extraction via Over-Fetching and Missing Authorization Controls

Overview Adalo’s no‑code application platform exposes complete user records through its database API for all applications built on both V1 and V2. Due to a platform-level flaw, authenticated users can retrieve full user data belonging to any Adalo application, regardless of configuration. This...

TorchServe script references S3 bucket without ensuring ownership or confirming accessibility

In the latest version of pytorch/serve, the script 'uploadresultstos3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not...

The vulnerability of the qlcnic_sriov_init() function in the drivers/net/ethernet/qlogic/qlcnic/qlcnic_sriov_common.c file of the Ethernet network adapter driver for Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qlcnicsriovinit function in the drivers/net/ethernet/qlogic/qlcnic/qlcnicsriovcommon.c file of the Ethernet network adapter driver for Linux operating systems is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to...