PT-2026-91255

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23 Description A use after free issue exists in the MP4Box component within the gf node get name function of the scenegraph/base scenegraph.c file. This flaw allows a remote attacker to trigger the condition throu...

Core Component Oracle Coherence Full Control

The vulnerability of the Core component of the Oracle Coherence data processing software is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the TCP protocol...

CVE-2023-45023

The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component...

ROS-20260914-73-0079

The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260914-73-0029

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260914-73-0042

The vulnerability of the Printing component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

ROS-20260914-73-0101

The vulnerability of the Password component in the Google Chrome browser is related to a flaw in data protection mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information through a specially created HTML page...

ROS-20260914-73-0065

The vulnerability of the Compositing component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260914-73-0018

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

PT-2026-90995

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is no...

ROS-20260914-73-0127

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created video file...

ROS-20260914-73-0088

The vulnerability of the Views component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Langflow AI Custom Component Authenticated Remote Code Execution

Langflow versions 1.0.0 through 1.11.1 are susceptible to authenticated remote code execution due to improper enforcement of security restrictions of code generation on the /api/v1/customcomponent endpoint. The endpoint accepts attacker controlled code that is then passed to Pythons exec function...

ROS-20260914-73-0016

The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260914-73-0072

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

CVE-2023-45023: Incorrect Authorization

The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component...

ROS-20260914-73-0077

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

PT-2026-91272

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and m...

ROS-20260914-73-0037

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

RHEL 9 : python-lxml (RHSA-2026:67325)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67325 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...