ROS-20260803-73-0006

The vulnerability in Tomcat is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)

Summary Numerous HTTP-emitting modules core.api.httpget, core.api.httppost, graphql.query/graphql.mutation, monitor.httpcheck, communication.slacksend, notification.discord,slack,teams.sendmessage, ai.visionanalyze anthropic path, verify.visualdiff, browser.proxyrotate, and the agent/llm inline...

DEBIAN-CVE-2026-17908

Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17713

Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

ROS-20260728-73-0008

The vulnerability in Grafana is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

Denial Of Service (DoS)

Next.js is vulnerable to Denial Of Service. The vulnerability is due to insufficient validation of remotely hosted images processed by the Image Optimization API, where malicious image content can trigger excessive CPU consumption, allowing attackers to degrade application availability...

The vulnerability of the dovecot-acl file in Dovecot and OX Dovecot Pro mail servers, due to access control deficiencies, allows attackers to trigger service interruptions.

The vulnerability of the dovecot-acl file of Dovecot and OX Dovecot Pro is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Adobe Experience Manager content and media data management system lies in the lack of authentication for a critical function. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain unauthorized access to protected information...

The vulnerability of the HttpClientCodec component in the networking application development framework allows attackers to compromise the integrity and accessibility of protected information, using Netty protocols.

The vulnerability of the HttpClientCodec component in the networking application development framework, used by servers and clients that utilize the Netty protocol, is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the...

ROS-20260714-73-0075

The vulnerability in Gitea is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260714-73-0071

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

BIT-JOOMLA-2026-48951 Joomla! Core - [20260705] - XSS in various modalreturn layouts

Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components...

The vulnerability of the Open WebUI web interface, related to deficiencies in the authentication process, allows attackers to escalate their privileges.

The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the Web Runtime Security component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Web Runtime Security component of the JD Edwards EnterpriseOne Tools system management tool for resources involves deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete dat...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

ROS-20260707-73-0027

The vulnerability in Apache Kafka is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the software interface of the Git-based software platform for collaborative code development on GitLab EE allows a perpetrator to gain unauthorized access to read, create, and delete data.

The vulnerability of the software interface of the Git-based software platform for collaborative code development on GitLab EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read,...

ROS-20260701-73-0007

The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted...