302822 matches found
DEBIAN-CVE-2026-80048
A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...
CVE-2026-93677 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor...
CVE-2026-97671
IBM Langflow OSS versions 1.0.0 through 1.12.2 are susceptible to a path traversal vulnerability (CWE-22 ). This flaw could allow a remote authenticated attacker to obtain sensitive information . No specific exploit details, impacts beyond information disclosure, or remediation steps are provided...
CVE-2026-88514
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
PT-2026-107422
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...
CVE-2026-106587
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled...
CVE-2026-20362: Server-Side Request Forgery (SSRF)
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker cou...
PT-2026-107329
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper input validation allows a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a...
Linux Distros Unpatched Vulnerability : CVE-2026-106350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page...
CVE-2026-88514: Exposure of Sensitive Information to an Unauthorized Actor
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
Linux Distros Unpatched Vulnerability : CVE-2026-106195
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via craft...
PT-2026-107426
Name of the Vulnerable Software and Affected Versions ERP system affected versions not specified Description Improper validation of payment callback parameters and inadequate authentication controls in an API endpoint allow an unauthenticated remote attacker to manipulate parameters. This can cau...
Linux Distros Unpatched Vulnerability : CVE-2026-106399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a craft...
The vulnerability of the DMOP call processing code in Xen hypervisors allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. [source-iocs-preserved const=DM_OP]
The vulnerability of the DMOP call processing code in Xen hypervisors is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-106451
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive tempora...
CVE-2026-93678: Authorization Bypass Through User-Controlled Key
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization...
CVE-2026-101331: Insufficiently Protected Credentials
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials...
Linux Distros Unpatched Vulnerability : CVE-2026-106340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via...
CVE-2026-97717: Uncontrolled Resource Consumption
CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service...