CVE-2026-5283

CVE-2026-5283 concerns an inappropriate ANGLE implementation in Google Chrome before 146.0.7680.178 that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The connected documents indicate this is fixed in Chrome/Chromium around the 146.0.7680.178 update, with relate...

CVE-2026-5283

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-5283

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-5283

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-5276

Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-5276

The CVE-2026-5276 vulnerability affects Google Chrome’s WebUSB policy enforcement, with the issue present in Chrome prior to 146.0.7680.178. A remote attacker could craft a page to bypass policy checks and read potentially sensitive information from process memory. The public descriptions consist...

CVE-2025-13855

IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

PT-2026-29617

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 IBM Security Verify could allow a remote attacker to access sensitive...

The vulnerability of the ttwu_queue_cond() function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ttwuqueuecond function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, involves an unvalidated error condition. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the SandboxJS library, related to improper code generation management, allows a violator to escape from the isolated programming environment.

The vulnerability of the SandboxJS library is related to improper handling of code generation. Exploiting this vulnerability can allow a remote attacker to escape from an isolated programming environment...

The vulnerability of the vortex_probe1() function in the drivers/net/ethernet/3com/3c59x.c file of the Linux kernel’s network adapter driver allows a hacker to cause a service failure.

The vulnerability of the vortexprobe1 function in the drivers/net/ethernet/3com/3c59x.c file of the Linux kernel’s network adapter driver is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the recv_done() function in the fs/smb/client/smbdirect.c module of the SMB client kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the recvdone function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, an...

CVE-2026-30526

CVE-2026-30526 affects SourceCodester Zoo Management System v1.0. The vulnerability is located on the login page in the msg parameter, where user-supplied content is echoed back without proper HTML encoding/sanitization, enabling a reflected XSS via a crafted URL. The connected documents confirm ...

Cisco Integrated Management Controller（IMC） 命令注入漏洞

The Cisco Integrated Management Controller IMC is a set of software developed by Cisco, Inc., used for managing UCS Unified Computing System environments. This software supports HTTP and SSH access, and allows operations such as powering on, powering off, and restarting servers. The Cisco IMC has...

The vulnerability of the Yamux multiplexer, related to insufficient exception handling, allows a perpetrator to trigger a service failure.

The vulnerability of the Yamux multiplexer is related to insufficient exception handling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260401-73-0019

A vulnerability in the PNG raster graphics library Libpng is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive data and cause a denial of service...

PT-2026-29619

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 IBM Security Verify could allow a remote attacker to access sensitive...

PT-2026-46575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in the Media component allows a remote attacker who has compromised the renderer process to execute arbitrary code inside a sandbox by using a...

PT-2026-38108

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 148.0.7778.96 Description Insufficient data validation in DevTools allows a remote attacker to bypass navigation restrictions through the use of a crafted HTML page. Recommendations Update to version...

CVE-2026-31027

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cstemodules/app.so. The vulnerability occurs because the rootSsid parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially...