F5 Networks BIG-IP : Intel UEFI vulnerability (K000163187)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163187 advisory. Improper input validation in the UEFI FlashUcAcmSmm module for some IntelR reference platforms may allow an escalation...

PT-2026-84838

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.88.6 LiteLLM versions prior to 1.96.2 Description Authenticated proxy users can redirect outbound provider calls to a destination under their control, causing the proxy to leak configured provider credentials. This...

Input component in Google

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

AI assistant Gemini DoS

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created...

Navigation component in Google

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service failures through a specially created HTML page...

Downloads Component DoS

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

DevTools DoS

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Extensions Component DoS

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Enterprise web browsers Google Chrome Microsoft Edge Data Compromise

The vulnerability of the Enterprise web browsers Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially crafted HTML page...

-based Blurams Lumi Security Camera A31C Code Execution

The vulnerability of the web interface of the Microprogramming Software-based Blurams Lumi Security Camera A31C relates to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a intruder to execute arbitrary code...

D-Link DCS-932L Subroutine Arbitrary Command Execution

The vulnerability of the sub42EF14 function /bin/alphapd of the D-Link DCS-932L microprogrammed surveillance camera is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

TOTOLINK A7000R Router Code Execution

The vulnerability of the setUploadUserData function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A7000R router’s microprogramming system exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Linux Layer 2 Tunneling Protocol DoS

The vulnerability of the l2tpxmitcore function in the net/l2tp/l2tpcore.c module, which is part of the Linux L2TP protocol implementation, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

amdgpu_userq_input_args_validate Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqinputargsvalidate function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to incorrect input validation. Exploiting this vulnerability can...

DevTools DoS

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a malicious file...

StorageAccessAPI Confidential Data Access

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

NetworkCache Confidential Data Access

The vulnerability of the NetworkCache component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Network Component Confidential Data Access

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Component DoS

The vulnerability of the Browser component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Speech Component Data Compromise

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially crafted HTML page...