The vulnerability of the Content Settings component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Content Settings component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially created HTML page...

The vulnerability of the File System Access component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data and compromise data integrity.

The vulnerability of the File System Access component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and influence data integrity through a specially created PDF file...

The vulnerability of the JIT component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows attackers to gain access to confidential data and compromise data integrity.

The vulnerability of the JIT component in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromis...

The vulnerability of the OpenSSH cryptographic protection mechanism, which stems from the use of an unprotected alternative channel, allows attackers to compromise data integrity.

The vulnerability of the OpenSSH cryptographic protection lies in the use of an unprotected alternative channel. Exploiting this vulnerability could allow a attacker to compromise the integrity of data...

The vulnerability in the Networking component of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, allows attackers to gain access to confidential data and compromise data integrity.

The vulnerability of the Networking component in Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromi...

The vulnerability of the SOGo software server, related to the lack of protective measures for website structures, allows attackers to access confidential data and compromise data integrity.

The vulnerability of the SOGo collaborative software server relates to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of the data...

The vulnerability of the management server’s functionality for the SOGo collaborative work software lies in the lack of protective measures for SQL query structures. This allows attackers to gain access to confidential data and compromise data integrity.

The vulnerability of the management server’s software for collaborative work, SOGo, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and affect the integrity of the data...

The vulnerability of the QuerySet.order_by() function in the Django web application framework allows a hacker to gain access to confidential data and influence the integrity of the data.

The vulnerability of the QuerySet.orderby function in the Django web application framework relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to gain access to sensitive data and compromise data integrity...

The vulnerability of the DNS LDNS library, related to the lack of a mechanism for verifying the source of data, allows attackers to compromise the integrity of the data.

The vulnerability of the DNS LDNS library is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of the OpenSSH cryptographic protection mechanism, related to the implementation of an incorrect control flow, allows a attacker to compromise the integrity of data.

The vulnerability of the OpenSSH cryptographic protection lies in the implementation of an incorrect control flow. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data remotely...

The vulnerability of the Autofill component in web browsers Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to compromise data integrity.

The vulnerability of the Autofill component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird relates to the ability to bypass authentication through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

The vulnerability in the Security component of Firefox web browsers, Firefox ESR, and the Thunderbird email client allows attackers to access confidential data and compromise data integrity.

The vulnerability of the Security component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

The vulnerability of the MapServer geographic data rendering system, related to deficiencies in path name restriction, allows attackers to compromise the integrity of the data.

The vulnerability of the MapServer geographic data rendering system is related to deficiencies in path name restriction. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rpm (UTSA-2026-093007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093007 advisory. A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or...

CVE-2026-80551

A flaw was found in the Linux kernel's s390/vfioccw component. This vulnerability arises because the system does not ensure that the address in the first Indirect Data Address Word IDAW remains constant between reads. An attacker could potentially exploit this to cause the system to operate with ...

CVE-2026-81673

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

python: Python base64: Incomplete data decoding due to premature stop at padding

A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...

CVE-2026-81673 Multiple Vulnerabilities in TOOOLS' iSquad

The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the idvideo and idambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...

CVE-2026-12817

A flaw was found in Bouncy Castle for Java. This vulnerability affects the OpenPGP Authenticated Encryption with Associated Data AEAD decryption process. Specifically, the system fails to verify the final authentication tag when processing data that is aligned in chunks. This oversight could allo...

CVE-2026-12802

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to compromise the integrity of data during the decryption of Cryptographic Message Syntax CMS AuthEnvelopedData. The software fails to properly enforce the tag-length, which could enable an attacker to...