311279 matches found
Xen Hypervisor DMOP Compromise
The vulnerability of the DMOP call processing code in Xen hypervisors is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-106232
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a craft...
Linux Distros Unpatched Vulnerability : CVE-2026-106264
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via ...
Linux Distros Unpatched Vulnerability : CVE-2026-106309
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-106399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a craft...
Linux Distros Unpatched Vulnerability : CVE-2026-106350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-106407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass...
PT-2026-111234
Уязвимость микропрограммного обеспечения сетевых устройств Cisco Meraki связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
PT-2026-111239
Уязвимость микропрограммного обеспечения сетевых устройств Cisco Meraki связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на доступность защищаемой информации...
PT-2026-111238
Уязвимость микропрограммного обеспечения сетевых устройств Cisco Meraki связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на целостность и доступность защищаемой информации...
CVE-2026-97674
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Code Injection vulnerability (CVE-2026-97674 ). Due to the improper neutralization of special elements used in an OS command, a remote authenticated attacker could execute arbitrary OS commands. This flaw is categorized under CWE-94...
SUSE CVE-2026-105922
A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function gettokenbincountsandmask of the file vllm/modelexecutor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack is...
SUSE CVE-2026-106183
Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
SUSE CVE-2026-106184
Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
SUSE CVE-2026-106195
Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...
SUSE CVE-2026-106196
Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-103360
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
SUSE CVE-2026-106245
Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-106246
Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...