204611 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-106206
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted...
CVE-2026-106185
Improper input validation in Viz in Google Chrome prior to 155.0.8059...
MiracleLinux 9 : nodejs:24 (AXSA:2026-1984:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1984:01 advisory. undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS certificat...
CVE-2026-106206
Improper input validation in Mobile in Google Chrome on on iOS prior t...
CVE-2026-106299
Improper input validation in WebAudio in Google Chrome prior to 155.0...
Linux Distros Unpatched Vulnerability : CVE-2026-106343
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2026-106414
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-106331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin...
PT-2026-107699
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Description Improper input validation in the REST API allows a user wi...
PT-2026-107374
In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse resulting in privilege escalation. It was possible for the built-in role to be weakened and the attacker's account added to a privileged team. This wa...
PT-2026-107545
Name of the Vulnerable Software and Affected Versions @backstage/plugin-kubernetes-backend versions prior to 0.21.8 Description Improper entity validation in a deprecated Kubernetes services endpoint allows an authenticated user with Kubernetes read permissions to access workload data beyond thei...
CVE-2026-106263
Improper input validation in SignIn in Google Chrome prior to 155.0.80...
CVE-2026-106353
Improper input validation in Mobile in Google Chrome on on iOS prior t...
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Li...
CVE-2026-106414
Improper input validation in Mobile in Google Chrome on on iOS prior t...
PT-2026-107606
Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description Improper input validation occurs within the software, which is categorized under the Common Weakness Enumeration CWE Pillar CWE-20. This issue was identified during an...
PT-2026-107598
Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An issue exists due to improper input validation of special elements used in a command. This flaw is categorized under CWE-20, which refers to improper input validation, where the softwar...
PT-2026-107586
Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC affected versions not specified Description An authenticated remote attacker with administrative credentials can execute arbitrary commands as the root user on the underlying operating...
PT-2026-107548
Authenticated users are able to manipulate both the SMTP envelope “Envelope-from” and “From” fields when sending emails through OVH mail servers. Due to OVH's default SPF configuration, which commonly includes include:mx.ovh.com, any authenticated user with a valid OVH email account can send...