7807 matches found
CVE-2026-65760 Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...
CVE-2026-52584
A flaw was found in libjxl. This buffer overflow vulnerability allows a local attacker to obtain sensitive information. The flaw occurs within the DecodeImageAPNG function, which can lead to unauthorized disclosure of data. Mitigation Mitigation for this issue is either not available or the...
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardi...
CVE-2026-13022
A flaw was found in Google Chrome's Autofill feature. A remote attacker, after compromising the browser's renderer process, could exploit an inappropriate implementation to leak sensitive data from other websites. This vulnerability is triggered by a specially crafted HTML page, leading to...
EUVD-2026-47042
Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle U.S...
PT-2026-63503
Name of the Vulnerable Software and Affected Versions Regular Labs extensions affected versions not specified Description Smart Search indexing may render generated content using the identity of the indexing administrator rather than a public guest. This behavior can lead to restricted or...
The vulnerability of the `dc_dmub_setup_subvp_dmub_command()` function in the `drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c` file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the dcdmubsetupsubvpdmubcommand function in the drivers/gpu/drm/amd/display/dc/dcdmubsrv.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the execution of operations outside of the buffer in memory...
CVE-2026-60674
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2026-60315
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticate...
CVE-2026-63143
Missing Authorization CWE-862 in Kibana can lead to unauthorized information disclosure via Privilege Abuse CAPEC-122. A user with limited feature privileges can access workflow execution outputs in their Kibana space without the authorization required to do so through the documented API. The...
CVE-2026-63143 Missing Authorization in Kibana Leading to Unauthorized Information Disclosure
Missing Authorization CWE-862 in Kibana can lead to unauthorized information disclosure via Privilege Abuse CAPEC-122. A user with limited feature privileges can access workflow execution outputs in their Kibana space without the authorization required to do so through the documented API. The...
CVE-2026-56146 Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure
Improper Access Control CWE-284 in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that shoul...
CVE-2026-63883
A flaw was found in the Linux kernel's qcomgeni serial driver. A race condition can occur when the uartflushbuffer function executes before the Direct Memory Access DMA completion interrupt is processed. This timing issue can lead to a kernel First-In, First-Out kfifo buffer underflow...
CVE-2026-56144
Technical details about CVE-2026-56144 are not publicly provided in the supplied documents; no affected products, versions, or fixes are specified here. Monitor for updates in connected sources.
CVE-2026-56144
Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...
CVE-2026-64053
A flaw was found in the Linux kernel's block integrity subsystem. Incorrect handling of bio integrity vector counts in the biointegritycopyuser function can lead to an out-of-bounds read during write operations. This vulnerability may allow a local attacker to cause a denial of service or...
PT-2026-62401
Name of the Vulnerable Software and Affected Versions Oracle Data Integrator version 12.2.1.4.0 Oracle Data Integrator version 14.1.2.0.0 Description A flaw exists in the Patchset Assistant component of the Oracle Data Integrator product within Oracle Fusion Middleware. A low privileged attacker...
CVE-2026-50756
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...
PT-2026-61973
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains a stored cross-site scripting XSS flaw. This issue allows an authenticated attacker to inject malicious scripts that are stored on the server, which can...