152610 matches found
Chromium: CVE-2026-8022 Inappropriate implementation in MHTML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - IoT Component uses cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl, cryptography-46.0.6-cp311-abi3-manylinux234x8664.whl, pyasn1-0.6.2-py3-none-any.whl, requests-2.32.5-py3-none-any.whl, bcprov-jdk18on-1.83.jar, pygments-2.19.2-py3-none-any.whl,...
CVE-2026-41650
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Prior to version 5.7.0, XMLBuilder does not escape the "--" sequence in comment content or the "" sequence in CDATA sections when building XML from JavaScript objects. This allows XML injection...
CVE-2026-8094
The WebRTC component in Mozilla Firefox ESR and the Thunderbird email client is vulnerable to a flaw caused by incorrect code generation . This vulnerability allows a remote attacker to achieve arbitrary code execution . Remediation is available in Firefox ESR 140.10.2 and Thunderbird 140.10.2 . ...
CVE-2026-8094
Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2...
DEBIAN-CVE-2026-42010
A flaw was found in gnutls. Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass...
CVE-2026-42010
A flaw was found in gnutls. Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass...
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: CVE-2026-2332: In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques bsc1262115. CVE-2026-5795: Fixed JaspiAuthenticator broken access control...
BELL-CVE-2026-43253
Bulletin has no description...
BELL-CVE-2026-43272
Bulletin has no description...
BELL-CVE-2026-43239
Bulletin has no description...
BELL-CVE-2026-43186
Bulletin has no description...
BELL-CVE-2026-43114
Bulletin has no description...
BELL-CVE-2026-43093
Bulletin has no description...
BELL-CVE-2026-43086
Bulletin has no description...
BELL-CVE-2025-71285
Bulletin has no description...
BELL-CVE-2026-43063
Bulletin has no description...
BELL-CVE-2026-43281
Bulletin has no description...