34085 matches found
PT-2026-38191
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description Insufficient validation of untrusted input in Dialog allows a remote attacker who has compromised the renderer process to perform UI spoofing via a crafted HTML page. Recommendations...
PT-2026-24706
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions...
Dell Alienware Command Center 访问控制错误漏洞
Dell Alienware Command Center is a package manager from Dell USA. An access control error vulnerability exists in Dell Alienware Command Center versions prior to 6.12.24.0. The vulnerability stems from improper access control and can be exploited by an attacker to cause a denial of service...
GitLab 安全漏洞
GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Vulnerabilities exist in versions of GitLab CE/EE before 18.7.6, 18.8.6...
PT-2026-24694
CVE-2026-32229 In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabled https://t.co/HGjrOHOd94...
OpenProject 安全漏洞
OpenProject is an open-source web-based project management software. Versions of OpenProject prior to 17.2.0 had security vulnerabilities. These vulnerabilities stemmed from improper validation of user identities during the editing of project budgets, planning labor costs, and the front-end cost...
Eugene AdGuard Home 授权问题漏洞
Eugene AdGuard Home is an open-source application developed by Eugene. It provides a full-network software solution for blocking advertisements and tracking. Versions of Eugene AdGuard Home prior to 0.107.73 had an authorization issue vulnerability. This vulnerability stemmed from an unverified...
Copyparty 跨站脚本漏洞
Copyparty is a portable file server developed by Ed’s individual developer. Versions of Copyparty prior to 1.20.12 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of the.prologue.html file, which could allow attackers to execute arbitrary JavaScri...
PT-2026-29458
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A use after free issue exists in the WebCodecs component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...
JetBrains Hub 安全漏洞
JetBrains Hub is a web-based application developed by the Czech company JetBrains. This program allows for the integration of various JetBrains tools. Versions of JetBrains Hub prior to 2026.1 contained a security vulnerability that could lead to mismatches between login accounts when SSO...
SPIP interface_traduction_objets SQL Injection Vulnerability
SPIP interfacetraductionobjets is an extension plugin from SPIP. A SQL injection vulnerability exists in versions of SPIP interfacetraductionobjets prior to 2.2.2. The vulnerability stems from interfacetraductionobjetspipelines.php directly concatenating the idparent parameter to the SQL WHERE...
PT-2026-24592
Name of the Vulnerable Software and Affected Versions IFTOP versions prior to IFTOP P4 181 Description IFTOP contains a Reflected Cross-site Scripting issue. Authenticated remote attackers can execute arbitrary JavaScript code in a user's browser through phishing attacks. Recommendations Update t...
Linux Distros Unpatched Vulnerability : CVE-2026-31812
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a...
CVE-2025-47911 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5
CVE-2025-47911 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5. A patched version of the package is available...
CVE-2025-58190 affecting package cni-plugins for versions less than 1.4.0-5
CVE-2025-58190 affecting package cni-plugins for versions less than 1.4.0-5. A patched version of the package is available...
CVE-2026-24117 affecting package gh for versions less than 2.62.0-13
CVE-2026-24117 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...
CVE-2026-23206 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23206 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2025-47911 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3
CVE-2025-47911 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3. A patched version of the package is available...