webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

edu.internet2.middleware.grouper:grouper-ui (>=7.0.0, <=7.5.0), edu.internet2.middleware.grouper:grouper-ws (>=7.0.0, <=7.5.0) potentially affected by CVE-2026-103470 via edu.internet2.middleware.grouper:grouper (>=7.0.0, <=7.5.0)

edu.internet2.middleware.grouper:grouper MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.5.0 Source cves: CVE-2026-103470 Source advisory: MEND:CVE-2026-103470...

edu.internet2.middleware.grouper:grouper-ui (>=6.0.0, <=6.4.0), edu.internet2.middleware.grouper:grouper-ws (>=6.0.0, <=6.4.0) potentially affected by CVE-2026-103470 via edu.internet2.middleware.grouper:grouper (>=6.0.0, <=6.4.0)

edu.internet2.middleware.grouper:grouper MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.4.0 Source cves: CVE-2026-103470 Source advisory: MEND:CVE-2026-103470...

Malicious Package

Overview epic-ui-toolkit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview player-support-tools-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

SUSE CVE-2026-102305

UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-102312

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102314

UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=3.20.0, <=4.23.0) +12 more potentially affected by CVE-2026-102509 via org.apache.plc4x:plc4j-driver-opcua (>=0.10.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-opcua MAVEN version =0.10.0, =4.7.0, =3.20.0, =3.20.0, =0.10.0, =0.10.0, =0.12.0, =0.13.0, =0.10.0, =0.10.0, =0.12.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

EUVD-2026-89493

An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system's diagnostic tools by repeatedly starting and aborting a specially crafted diagnostic task through the web UI...

CVE-2026-18105

An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system's diagnostic tools by repeatedly starting and aborting a specially crafted diagnostic task through the web UI...

Telerik UI for ASP.NET AJAX 2009.1.311 < 2026.2.708 RadChart ChartImage.axd File Read

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2009.1.311 or later and prior to 2026.2.708. It is, therefore, affected by an information disclosure vulnerability. The obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated...

Telerik UI for ASP.NET AJAX 2009.1.314 < 2026.2.708 LayoutBuilder XXE DoS

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2009.1.314 or later and prior to 2026.2.708. It is, therefore, affected by a denial of service vulnerability. The internal LayoutBuilder control processes client-state XML without disabling DTD processing,...

Telerik UI for ASP.NET AJAX 2011.2.712 < 2026.2.708 Multiple Vulnerabilities

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2011.2.712 or later and prior to 2026.2.708. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.2.708, insufficient validation of the language paramete...

CVE-2026-18105: Uncontrolled Resource Consumption

An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to cause a denial of service of the system's diagnostic tools by repeatedly starting and aborting a specially crafted diagnostic task through the web UI...

Linux Distros Unpatched Vulnerability : CVE-2026-102305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromiu...

Linux Distros Unpatched Vulnerability : CVE-2026-102314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium securi...

Linux Distros Unpatched Vulnerability : CVE-2026-100831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and...

Telerik UI for ASP.NET AJAX 2008.3.1314 < 2026.2.708 RadEditor PDF Export SSRF

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2008.3.1314 or later and prior to 2026.2.708. It is, therefore, affected by a server-side request forgery vulnerability. Insufficient validation of content submitted to the RadEditor PDF export feature may...

AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.2:CLSA-2026:1769515411)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1769515411 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the...