46780 matches found
CVE-2026-14443
Brocade SANnav versions before 3.0.1a are vulnerable to incomplete log sanitization during bulk IPsec policy collection. This flaw allows extension switch pre-shared keys to be written to system logs. Attackers with read access to container logs or support archives can retrieve these keys, potent...
CVE-2026-14443 Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...
CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...
CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...
CVE-2026-82372
Brocade SANnav versions prior to 3.0.1a are vulnerable to improper handling of sensitive data during IPsec policy creation and modification. This flaw causes pre-shared keys to be recorded in application logs, potentially exposing credentials used to secure network tunnels to individuals with rea...
CVE-2026-91122
Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the video placeholder component allowed crafted HTML to cause an attribute breakout and inject an attacker-controlled event handler. An authenticated user with default trust-level posting...
USN-8814-1: Octavia vulnerabilities
It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. CVE-2026-94572 It was discovered tha...
USN-8814-1 octavia vulnerabilities
It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. CVE-2026-94572 It was discovered tha...
fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization
A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a...
RLSA-2026:70498 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry CVE-2026-45894 kernel: crypto: ccp - Fix a...
Astra Linux – Vulnerability in Chromium
Missing authorization in the WebUI of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Improper certificate validation in FedCM using Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass web origin policies through crafted network traffic. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Missing authorization in the Preload process in Google Chrome before version 152.0.7977.65 allowed a remote attacker to bypass web origin policies through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...