ROS-20260819-73-0044

The vulnerability in perl-Image-ExifTool is related to insufficient neutralization of special elements in the request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-76039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain...

CVE-2026-72330

A flaw was found in the Linux kernel's TLS Transport Layer Security implementation. A remote attacker could send specially crafted zero-length TLS application data records. This could cause the system to repeatedly process these empty records, blocking all subsequent legitimate data on the...

CVE-2026-76033

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-76041

Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-76040

CVE-2026-76040 is a use-after-free vulnerability in the Browser component of Google Chrome (Chromium-based), affecting versions prior to 151.0.7922.169 on Mac. A remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via a crafted HTML page. The CVSS 3.1 scor...

CVE-2026-71879 Authentication bypass in Integrated Publishing Toolkit

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...

CVE-2026-72217

A flaw was found in the Linux kernel's SUNRPC component. The xdrbuftobvec function performs an out-of-bounds write when processing client-supplied RPC Remote Procedure Call payload sizes without proper boundary checks. A remote attacker could exploit this by crafting malicious RPC requests, leadi...

CVE-2026-19501

CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

CVE-2026-19501 CVE-2026-19501

CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...

CVE-2026-19501

CVE-2026-19501 is a CSV injection vulnerability in the Brainstorm Force SureForms WordPress plugin (versions ≤ 2.12.1). The CSV export functionality fails to sanitize spreadsheet formula characters in user-controlled form field names, allowing a remote attacker to inject formulas that execute on ...

openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption...

CVE-2026-72231

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking module of the Linux kernel. An incorrect check during the handling of TT Topology Table requests can prevent the proper cleanup of request nodes when send buffer allocation fails. This can lead to a remote attacker...

CVE-2026-19968

A flaw was found in Open Asset Import Library Assimp. A remote attacker could exploit a heap-based buffer overflow vulnerability in the ReadFaces3DGSMDL7 function of the 3DGS MDL7 Model Parser by providing a specially crafted 3DGS MDL7 model file. This could lead to a denial of service. Mitigatio...

tomcat: Apache Tomcat: Denial of Service via WebSocket chat example

A flaw was found in Apache Tomcat. This uncontrolled resource consumption vulnerability, located in the WebSocket chat example, allows a remote attacker to cause a Denial of Service DoS by exhausting system resources. This can lead to the affected system becoming unresponsive or crashing...

CVE-2026-19481

A flaw was found in @fastify/busboy, a multipart form-data parser. A remote attacker can exploit this vulnerability by sending specially crafted multipart form-data headers. This can cause a TypeError in the parser, leading to the termination of the Node.js process and resulting in an...

EUVD-2026-60554

SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...

PT-2026-77148

The Entries component in Brainstorm Force SureForms version, less than 2.1.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the...

CVE-2026-52610

CVE-2026-52610 is a critical (CVSS 9.1) arbitrary file write/directory traversal vulnerability in reportico-web versions ≤ 8.1.0 . A remote, unauthenticated attacker can create or overwrite files anywhere on the filesystem (subject to the web user's permissions) by crafting a request to the run.p...

PT-2026-77334

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...