30394 matches found
Photon OS 5.0: Python3 PHSA-2026-5.0-91-0726
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0726. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows attackers to compromise data integrity.
The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...
The vulnerability of the SVG component in Google Chrome and Microsoft Edge web browsers allows attackers to trigger a service failure.
The vulnerability of the SVG component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
Hardware Design and Security in the Era of Chiplets and LLMs
The semiconductor industry is undergoing a dual revolution: the shift toward heterogeneous 2.5D chiplet systems and the integration of Large Language Models LLMs into Electronic Design Automation EDA flows. While these paradigms offer unprecedented benefits in yield, modularity, design...
Agent against Agent: An Agentic System for Automatic Prompt Injection Red Teaming
Prompt injection poses significant security risks to LLM agents. Efficient and effective red-teaming is therefore critical, both for evaluating these risks and for collecting training data to improve defenses. Existing state-of-the-art prompt injection red-teaming methods primarily rely on...
LLM-Assisted Detection and Repair of Hardware Security Vulnerabilities in Verilog Designs
Hardware designs, like software, are susceptible to bugs that can introduce security vulnerabilities and create opportunities for malicious exploitation. Unlike software vulnerabilities, however, hardware flaws become permanently embedded in silicon after fabrication, making them difficult or...
Checked-In Secret Detection: Strings Are All You Need
Hardcoded secrets in source code pose critical security vulnerabilities which can be easily exploited by malicious adversaries. Existing regex-based detection approaches suffer from fundamental limitations, as secrets often lack identifiable patterns, resulting in poor precision and recall. Recen...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.11 Vulnerability Details CVEID:CVE-2020-28851 DESCRIPTION: In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. x/text/language is supposed to...
CVE-2026-15337
A flaw was found in Django. A remote attacker could trigger a denial-of-service DoS condition by sending many distinct, very long language codes to the django.utils.translation.checkforlanguage function. These codes are stored in an in-memory cache, leading to excessive memory consumption. While...
CVE-2026-18446 vulnerabilities
Vulnerabilities for packages: serve, nextcloud-server, gitlab-rails-ce, saf, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce-fips, librechat, jupyter-base-notebook, yaml-language-server, vitess, opensearch-dashboards, langfuse-fips, unleash-proxy, prism, commercial-gitlab-rails-ee,...
GHSA-7P8R-X3MC-P8W7 vulnerabilities
Vulnerabilities for packages: serve, nextcloud-server, gitlab-rails-ce, saf, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce-fips, librechat, jupyter-base-notebook, yaml-language-server, vitess, opensearch-dashboards, langfuse-fips, unleash-proxy, prism, commercial-gitlab-rails-ee,...
CVE-2026-18446 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, saf, yaml-language-server, opensearch-dashboards, vitess, langfuse, renovate, serve, argo-workflows, prism...
GHSA-7P8R-X3MC-P8W7 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, saf, yaml-language-server, opensearch-dashboards, vitess, langfuse, renovate, serve, argo-workflows, prism...
CVE-2026-69704
Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsanitized input through a GET parameter to the supp deletion helper function. Attackers can inject malicious SQL syntax via the vulnerable GET parameter to perform unauthorized...
Memory Allocation with Excessive Size Value
Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the checkforlanguage function. An attacker can exhaust system memory by submittin...
CVE-2026-15337
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
CVE-2026-15337
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
UBUNTU-CVE-2026-15337
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
