151626 matches found
CVE-2026-10944
A vulnerability in Google Chrome on iOS prior to version 149.0.7827.53 allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is insufficient policy enforcement in the Autofill component. This issue is classified with High security severity by Chromium. No spec...
CVE-2026-10934
A Use after free vulnerability in the Autofill component of Google Chrome on Android (prior to version 149.0.7827.53 ) allows a remote attacker to perform a sandbox escape via a crafted HTML page after compromising the renderer process. The vulnerability is reported to have a High security severi...
CVE-2026-10920
A vulnerability exists in the WebShare component of Google Chrome and Microsoft Edge browsers due to insufficient validation of untrusted input . A remote attacker who has already compromised the renderer process can use a crafted HTML page to potentially perform a sandbox escape . Impact include...
CVE-2026-10914
Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2024-27891 On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.
On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This can cause outgoing packets to incorrectly be allowed or denied...
USN-8361-2 linux-fips vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Packet sockets; CVE-2026-31504...
Improper Privilege Management
Overview shopware/platform is a Shopware e-commerce core. Affected versions of this package are vulnerable to Improper Privilege Management via the upsertUser function. An attacker can gain unauthorized administrative privileges by creating or updating user accounts with elevated permissions...
MINI-785C-24VP-8H36
Bulletin has no description...
MINI-4M62-97XG-3FRW
Bulletin has no description...
MINI-FJM4-MQ7J-8RVP
Bulletin has no description...
MINI-256F-5R9X-3886
Bulletin has no description...
MINI-4R4F-H2V7-8C7F
Bulletin has no description...
MINI-FR5M-CW3V-X2QW
Bulletin has no description...
MINI-VFRW-VXGC-FR24
Bulletin has no description...
Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths
Summary app.mount strips the mount prefix from the incoming request path using the raw URL pathname, while route matching is performed against the percent-decoded path. This inconsistency causes the prefix to be stripped at the wrong position when the path contains percent-encoded multi-byte...
GHSA-2GCR-MFCQ-WCC3 Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths
Summary app.mount strips the mount prefix from the incoming request path using the raw URL pathname, while route matching is performed against the percent-decoded path. This inconsistency causes the prefix to be stripped at the wrong position when the path contains percent-encoded multi-byte...
CVE-2026-41237 Froxlor has an incomplete fix for CVE-2026-30932
Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses \s+ which matches newlines allowing embedded newlines to pass, TLSA matchingType=0 has no upper bound on hex data length, and all validators return raw input without zone-file escaping...
DEBIAN-CVE-2026-50266
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...