Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Mojom IDL of Google Chrome prior to version 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

CVE-2026-12762

IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files...

ROS-20260723-73-0052

The vulnerability in Chromium is related to the use of an unauthorized intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CVE-2026-47052

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker...

CVE-2026-51385

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...

CVE-2026-14147

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

The vulnerability of the ADPatch component of the Oracle Applications management and support system allows a hacker to gain full access to the device. This component is part of the Oracle E-Business Suite, which is used for automating business processes in enterprises.

The vulnerability of the ADPatch component in the Oracle Application Management and Support System, which is part of the Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain full access to the device remotely...

The vulnerability of the IBM Storage Protect Server (formerly Tivoli Storage Manager) software platform, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Storage Protect Server formerly Tivoli Storage Manager software platform lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20260609-73-0004

The vulnerability of the RDP client FreeRDP is related to the escape of operations beyond the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2026-11067

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10973

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

ROS-20260529-73-0019

The vulnerability of the software for interacting with servers via CURL is related to the storage of dangerous files. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

The vulnerability of the npm xrpl package on the Node.js software platform, related to malicious code embedded within it, allows attackers to gain unauthorized access to protected information.

The vulnerability of the npm xrpl package on the Node.js software platform is related to malicious code embedded within it. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

PT-2026-32937

Name of the Vulnerable Software and Affected Versions Unisys WebPerfect Image Suite version 3.0.3960.22810 Unisys WebPerfect Image Suite version 3.0.3960.22604 Description An exposed deprecated .NET Remoting TCP channel allows remote unauthenticated attackers to leak NTLMv2 machine-account hashes...

The vulnerability of the PAN-OS operating system, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the PAN-OS operating system is related to the disclosure of system data by unauthorized parties within the controlled area. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2026-5888

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-2862 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 IBM Security Verify could allow a remote attacker to access sensitive...

The vulnerability of the Glances monitoring tool, related to the disclosure of information, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Glances monitoring tool is related to the disclosure of information. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information...

The vulnerability of the LoadNinja plugin in Jenkins automation servers, related to the storage of keys in an open manner, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the LoadNinja plugin in Jenkins automation servers lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2026-1561 IBM WebSphere Application Server Liberty Server-Side Request Forgery

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery SSRF. This may allow remote attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating...