249073 matches found
postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind
A flaw was found in PostgreSQL. This vulnerability, related to symlink following in pgbasebackup plain format and pgrewind, allows an origin superuser to overwrite local files. By exploiting this, an attacker could potentially hijack the operating system account. This attack has practical...
EUVD-2026-48242
SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, the application opens a custom tab and inserts the link's icon parameter into the tab header via innerHTML without...
Millions of cars could be tracked and unlocked by a hidden security flaw
A car alarm vendor's coding mistake has left millions of vehicles vulnerable to theft and location tracking. Thanks to the way dealers sell car alarms, many affected drivers don't even know they have one installed. The device is the KARR Security System, a Bluetooth-enabled aftermarket alarm buil...
EUVD-2026-48162
Subscriber Broken Access Control in WP Booking System 5.12.8.1 versions...
CVE-2026-57367
CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in File System Access in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the FileSystem component in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write operations through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of after-free in FileSystem in Google Chrome before 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: High...
ROOT-OS-DEBIAN-13-CVE-2016-9580 CVE-2016-9580 in rootio-openjpeg2 - Patched by Root
Root has patched CVE-2016-9580 in the rootio-openjpeg2 package for Root:Debian:13. Multiple fixed versions available...
RHSA-2026:42122 Red Hat Security Advisory: sssd security update
Bulletin has no description...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
USN-8597-1: Linux kernel (IBM) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
GHSA-V396-V7Q4-X2QJ vulnerabilities
Vulnerabilities for packages: checkov, datahub-ingestion, datahub-ingestion-fips, mlflow, opal, awx...
CVE-2026-16221 vulnerabilities
Vulnerabilities for packages: renovate, kibana, wazuh-dashboard-fips, keep, arangodb, yaml-language-server, keep-fips, prism, argo-workflows, unleash, gemini-cli, opensearch-dashboards-fips, unleash-fips, opensearch-dashboards, librechat, tileserver-gl-fips, langfuse, tileserver-gl, langfuse-fips...
GHSA-2F96-G7MH-G2HX vulnerabilities
Vulnerabilities for packages: mlflow, checkov...
USN-8576-2 linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
USN-8575-2: Linux kernel vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
