The vulnerability of the Network component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity through a specially crafted HTML page...

The vulnerability of the CSS component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of the CSS component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of the Speech component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially created HTML page...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the web page structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...

CVE-2026-73779: Improper Privilege Management

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

ROS-20260831-73-0011

The vulnerability of the HttpObjectDecoder component in the framework for developing network applications, servers, and Netty protocol clients is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

The vulnerability of the DNS LDNS library, related to the lack of a mechanism for verifying the source of data, allows attackers to compromise the integrity of the data.

The vulnerability of the DNS LDNS library is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of the OpenSSH cryptographic protection mechanism, which arises from performing operations in the wrong order, allows attackers to gain access to confidential data and compromise the integrity of that data.

The vulnerability of the OpenSSH cryptographic protection lies in the improper execution of certain operations. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise the integrity of those data...

CVE-2026-59641

A flaw was found in Bouncy Castle for Java. The S/MIME Secure/Multipurpose Internet Mail Extensions validator improperly trusts the signing time asserted by the signer during path validation. This could allow an attacker to bypass certificate path validation, potentially leading to the acceptance...

The vulnerability in the implementation of the Bluetooth protocol in Linux operating systems allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the Linux operating system’s Bluetooth kernel implementation is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the scsi_queue_rq() function in the drivers/scsi/scsi_lib.c module of the Linux operating system’s SCSI device driver allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the scsiqueuerq function in the drivers/scsi/scsilib.c module of the Linux SCSI device driver involves synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information or cause service...

JetBrains TeamCity < 2021.2.2 XSS (CVE-2022-25261)

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.2. It is, therefore, affected by a vulnerability: - JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS. CVE-2022-25261 Note that Nessus has not tested for this issue but has instead relied only on th...

CVE-2026-58439

A flaw was found in Gitea. This vulnerability allows an attacker to bypass branch protection by retargeting a Pull Request PR that has a stale 'official' approval flag. This could lead to unauthorized code being merged into a protected branch, compromising code integrity. Mitigation Mitigation fo...

EUVD-2026-63118

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded report search job and use exposed session material to access all relevant data and affect system integrity on the...

CVE-2026-73879

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

EUVD-2026-61946

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-61685

Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion component: Deployment. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-49852

A flaw was found in the joserfc Python library. A remote attacker can exploit a vulnerability in the joserfc.jwt.decode function to forge HMAC-signed tokens. This occurs because the library accepts tokens signed with an empty or null verification key, allowing an attacker to bypass integrity...