4019 matches found
PT-2026-90389
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ff encode getdeviceinfo nfsd4 ff encode getdeviceinfo computes the da addr body reservation as 16 + netid len + addr len, but the subsequent xdr encode opaque calls emit 8 + round upnetid len,...
EUVD-2026-75101
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfreesensitive for derived key buffers cryptokrb5prepareencryption and cryptokrb5preparechecksum free the buffer holding the freshly derived keys with plain kfree, leaving the key material behind in the freed...
CVE-2020-11019
CVE-2020-11019 FreeRDP 2.0.0以下では、ロガーを"WLOGTRACE"に設定して実行する際、無効な配列インデックスの読み取りによりアプリケーションがクラッシュする可能性があります。データがローカルターミナルに文字列として出力される可能性があります。これは2.1.0で修正されました。 authentication| complexity| vector ---|---|--- SINGLE| LOW| NETWORK...
CVE-2025-46808 Sensitive information is leaked into NeuVector’s manager container logs
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...
cve-2026-20127
CVE-2026-20127 扫描器 概述 该项目是一个基于 Windows 的网络扫描工具,使用 C++ 编写,旨在识别潜在的 Cisco SD-WAN / vManage 类服务,并针对标记为 CVE-2026-20127 的引用问题执行漏洞检查。 功能 IP 范围扫描(起始 IP → 结束 IP) 针对 Cisco SD-WAN / vManage 特征的服务指纹识别 HTTP 响应头与响应体分析 向疑似管理端点发送测试请求 根据响应内容与状态码检测潜在暴露风险 简单的交互式 CLI 界面 对敏感端点执行二次请求: /dataservice/client/admin/setting...
CVE-2026-87642
A flaw was found in WebGL within Chromium. An uninitialized resource vulnerability allows a remote attacker to leak sensitive cross-origin data. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-87642
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87642
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87516
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87619
CVE-2026-87619 affects Google Chrome prior to 153.0.8010.36 , where an observable discrepancy in the Prefetch mechanism allowed a remote attacker to leak cross-origin data via a crafted HTML page. The Chromium team rated this Low severity; NVD scores it CVSS 4.3 (Medium) with a network vector, lo...
CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74363
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87516
A medium-severity vulnerability in the Navigation component of Google Chrome prior to 153.0.8010.36 allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is described as an observable discrepancy in the Navigation subsystem. The CVSS v3.1 base score is 4.3 (AV...
CVE-2026-87516
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87482
Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-74331
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87642
CVE-2026-87642 is an uninitialized resource vulnerability in the WebGL component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit a crafted HTML page to leak cross-origin data . The Chromium security team rated this as Medium severity, with a CVSS 3.1 s...