The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data.

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the CSS component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of the WebGL component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.

The vulnerability of the WebGL component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

The vulnerability of open libraries and tools written in C# ROS# relates to errors in the mechanism for handling relative pathnames to directories. This allows attackers to gain access to read, modify, or delete data.

The vulnerability of open libraries and tools written in C for ROS is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to read, modify, or delete data...

Vulnerability of CSS components in Google Chrome and Microsoft Edge web browsers, allowing attackers to access confidential data

The vulnerability of the CSS components in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-73755

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system...

CVE-2026-79685

Dell PowerStore is affected by an Argument Injection vulnerability. An authenticated user with limited privileges could exploit this to gain unauthorized access to sensitive system information , resulting in a High confidentiality impact with no integrity or availability impact (CVSS v3.1: 6.5 ME...

PT-2026-84396

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Where two authenticated principals originating from different authentication realms share the same username value...

CVE-2026-81293

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

EUVD-2026-68780

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293 WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293 WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293

CVE-2026-81293 is an unauthenticated SQL injection vulnerability in the WP Data Access WordPress plugin, affecting versions 5.5.81 and below . The flaw was discovered by sequence_X0 and reported via Patchstack. The CVSS v3.1 score is 9.3 (Critical) , with a network attack vector, low complexity, ...

Security Bulletin: Maximo AI Service uses java 17.0.13 which is vulnerable to CVE-2025-21502.

Summary Maximo AI Service uses java 17.0.13 which is vulnerable to CVE-2025-21502. This bulletin contains information regarding the vulnerability and its fix. Vulnerability Details CVEID:CVE-2025-21502 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM...

USN-8694-1: CRaC JDK 21 vulnerabilities

It was discovered that the JSSE component of CRaC JDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of CRaC JDK 21 did not correctly authorize users. A remote...

USN-8689-1 openjdk-26 vulnerabilities

It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 26 did not correctly authorize users. A remote attack...

PT-2026-84005

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

Medium: java-21-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20...

Medium: java-1.8.0-openjdk

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20...