39450 matches found
PT-2026-47583
None of the response paths in internal/web/ or internal/api/ set the standard browser-security headers. grep for Content-Security-Policy, X-Frame-Options, Strict-Transport-Security, X-Content-Type-Options, Referrer-Policy returns zero matches across the codebase. Impact The admin UI signs CA...
PT-2026-47255
A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc ro/smb.conf of the component Samba. Executing a manipulation can lead to weak password requirements. The attack is only possible within the local network. A high complexity level...
PT-2026-47620
Name of the Vulnerable Software and Affected Versions nebula-mesh versions prior to 0.3.0 Description Response paths in internal/web/ and internal/api/ do not implement standard browser-security headers. The absence of X-Frame-Options: DENY or frame-ancestors 'none' in the Content-Security-Policy...
Medium: ImageMagick
Issue Overview: When writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. as per: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7wff-wpr6-vmhm CVE-2026-42326 Due to a missing check in the PSD decoder it would be possible to...
VMware Cloud Foundation Operations 安全漏洞
VMware Cloud Foundation Operations is a private cloud operations management platform provided by the American company VMware. There is a security vulnerability in VMware Cloud Foundation Operations. This vulnerability stems from multiple storage-based cross-site scripting vulnerabilities, which...
CVE-2026-11309
An insufficient policy enforcement flaw was found in the History component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506392934...
CVE-2026-11292
A policy bypass flaw was found in the Blink component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502358901...
CVE-2026-11291
A policy bypass flaw was found in the Android Autofill component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502346855...
CVE-2026-11288
A policy bypass flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502231588...
CVE-2026-11283
A policy bypass flaw was found in the Shortcuts component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502069297...
CVE-2026-11282
A policy bypass flaw was found in the Sandbox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502023400...
CVE-2026-11275
An insufficient policy enforcement flaw was found in the Page Info component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501763121...
CVE-2026-11264
A policy bypass flaw was found in the Content Security Policy component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500099106...
CVE-2026-11267
An insufficient policy enforcement flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500528267...
CVE-2026-11266
A policy bypass flaw was found in the SafeBrowsing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500521311...
CVE-2026-11263
An insufficient policy enforcement flaw was found in the WebAuthentication component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500044225...
CVE-2026-11260
A policy bypass flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499257860...
CVE-2026-11252
A policy bypass flaw was found in the Content Settings component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498373018...