CVE-2026-109813

A hard-coded cryptographic key vulnerability exists in the /usr/bin/sysman component of certain Moxa industrial computing products . An unauthenticated attacker with adjacent network access can exploit the exposed private key material to compromise the confidentiality and integrity of communicati...

Extensions Component Compromise Protected Information

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

Safebrowsing Component Compromise

The vulnerability of the Safebrowsing component in Google Chrome and Microsoft Edge is related to insufficient validation of the input protected information. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information through a specially...

StorageAccessAPI Component Compromise

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Google Chrome Downloads Component Data Compromise

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information through a specially crafted HTML page...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information through a specially crafted HTML page...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information through a specially created malicious file...

ROS-20260930-73-0009

The vulnerability of the osdmapapplyincremental function in the net/ceph/osdmap.c module of the Linux kernel is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity of protected information or cause service...

CVE-2026-8065: Missing Authentication for Critical Function

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

vm2 Sandbox Prepare Stack Trace

The vulnerability of the defaultSandboxPrepareStackTrace function in the lib/setup-sandbox.js file of the vm2 library, a part of the npm package manager, is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...

CVE-2026-17207: Out-of-bounds Write

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...

ROS-20260505-73-0060

A vulnerability in the email module of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability could allow a remote attacker to compromise the integrity of protected information...

EUVD-2020-19373

Malware in sbrugna...

CVE-2025-53077

An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...

CVE-2020-2887

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

SAP S4CORE security vulnerabilities

SAP S4CORE is a Managed Procurement Contracts application from SAP, Germany. A security vulnerability exists in SAP S4CORE that originates from data tampering and could result in the modification of entity sets and compromise application integrity...

CVE-2025-21590: Improper Isolation or Compartmentalization

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affecte...

CVE-2024-47565

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attacker to compromise the integrity of the configuration of the...

ROS-20240902-18

A vulnerability in the Flatpak application and environment management tool is related to improper Neutralization of special output elements used by a downstream component. Exploitation of the vulnerability could allow a remote attacker to gain access to sensitive data and compromise its integrity...