Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption issues in DevTools, which may allow remote attackers to read memory within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in Skia, which may allow remote attackers to read memory within the sandbox through specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in DevTools, which could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have security vulnerabilities. These vulnerabilities stem from issues with the ...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component, potentially allowing low-privilege attackers to access the JDENET network. Such attackers may make...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the Transactions Platform, potentially allowing remote attackers to read memory within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in Google Lens, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 version contains security vulnerabilities. These vulnerabilities stem from issues with the Libraries component. The vulnerabilities are difficult to exploit; attackers need to log in locally and rely on user interaction to exploit them. This can lead to service hangs or freque...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to log into the infrastructure running on JD Edwards EnterpriseOne...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper V8 access control mechanisms, which may allow remote attackers to bypass web source policies through specially crafted HTML pages...

tox-dev filelock backend link vulnerability

The tox-dev filelock version 3.32.6 up to version 4.2.1 has a post-processing link vulnerability. This vulnerability arises from SoftFileLock’s handling of symbolic links when checking the writeability of nodes without owner write permissions. It may allow local users to infer whether the selecte...

Oracle Mobile Field Service security vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow high-privilege attackers to log in and execute infrastructure tasks, thereby taking control of Oracle Mobile Field...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a security vulnerability. This vulnerability stems from memory corruption in Actor components, which could allow remote attackers to read memory within the sandbox through specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome on Windows versions prior to 156.0.8078.47 contains a buffer error vulnerability. This vulnerability stems from memory corruption in ANGLE, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in ANGLE, which may allow remote attackers to read memory within the sandbox through a specially crafted HTML page...

DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from incorrect handling of the setSWMProfile parameter in the function setSWMProfile located in the file/cgi-bin/mainfunction.cgi. This could lead to path traversal attacks, and attackers could...

EspoCRM authorization issue vulnerability

EspoCRM versions 9.3.10 and earlier, as well as 10.0.10 and earlier, have an authorization vulnerability. This vulnerability stems from improper handling of the parameter ID in the ImageSourceProvider::get function within the PDF Rendering Pipeline component. This could lead to authorization...

Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2026-82891)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-82891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key. CWE:CWE-321: Use of...

CVE-2026-107569 Unchecked Input for Loop Condition in hMailServer

Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying mail. The server bounds the mail it generates in response to a message - a rule forward, reply or copy, an account forward, a Sieve...

EUVD-2026-104405

A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqlierror of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation of the argument...