ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Extensions Component Confidential Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the web page structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

Related-Website-Sets Component Confidential Data Access

The vulnerability of the Related-Website-Sets component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to access confidential data through a specially created HTML page...

WebNN Component Confidential Data Access

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Google Chrome Edge XML Data Compromise

The vulnerability of XML components in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially creat...

CSS Component Confidential Data Compromise

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

Password Component Access Confidential Data

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

WebGL Confidential Data Compromise

The vulnerability of WebGL interfaces in Google Chrome and Microsoft Edge relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity through a specially created HTML...

NetworkCache Confidential Data Access

The vulnerability of the NetworkCache component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-73755

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system...

CVE-2026-79685

Dell PowerStore is affected by an Argument Injection vulnerability. An authenticated user with limited privileges could exploit this to gain unauthorized access to sensitive system information , resulting in a High confidentiality impact with no integrity or availability impact (CVSS v3.1: 6.5 ME...

PT-2026-84396

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Where two authenticated principals originating from different authentication realms share the same username value...

CVE-2026-81293

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293 WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

EUVD-2026-68780

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293 WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293

CVE-2026-81293 is an unauthenticated SQL injection vulnerability in the WP Data Access WordPress plugin, affecting versions 5.5.81 and below . The flaw was discovered by sequence_X0 and reported via Patchstack. The CVSS v3.1 score is 9.3 (Critical) , with a network attack vector, low complexity, ...

Security Bulletin: Maximo AI Service uses java 17.0.13 which is vulnerable to CVE-2025-21502.

Summary Maximo AI Service uses java 17.0.13 which is vulnerable to CVE-2025-21502. This bulletin contains information regarding the vulnerability and its fix. Vulnerability Details CVEID:CVE-2025-21502 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM...

USN-8694-1: CRaC JDK 21 vulnerabilities

It was discovered that the JSSE component of CRaC JDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of CRaC JDK 21 did not correctly authorize users. A remote...

USN-8689-1 openjdk-26 vulnerabilities

It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 26 did not correctly authorize users. A remote attack...