37351 matches found
PYSEC-2026-758 Zope does not properly verify the access for objects with proxy roles
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration...
EUVD-2026-41375
In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized...
MINI-G6XM-HXFP-3P6Q
Bulletin has no description...
MINI-RP87-9CF3-C5PQ
Bulletin has no description...
MINI-2PWV-36JQ-RJGW
Bulletin has no description...
MINI-MGPR-CPFM-W9PH
Bulletin has no description...
MINI-7JJ3-HWFF-25G3
Bulletin has no description...
MINI-7P3R-C928-3XRQ
Bulletin has no description...
EUVD-2026-41157
Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. Chromium security severity: Medium...
MINI-HM85-47J3-F394
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-13490
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the file...
Уязвимость компонента PDF браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код
Уязвимость компонента PDF браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код с помощью специально созданного PDF-файла...
MINI-PP68-M5JH-3FFH
Bulletin has no description...
MINI-VPXP-7XGM-9VWH
Bulletin has no description...
DEBIAN-CVE-2026-14404
Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. Chromium security severity: Medium...
CVE-2026-14404
Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. Chromium security severity: Medium...
PYSEC-2026-612
Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, the Documents and Images chooser's chosen endpoint incorrectly listed items for which the user has not been granted choose permission. A user with access to the Wagtail admin could se...
CVE-2026-54259
Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, the Documents and Images chooser's chosen endpoint incorrectly listed items for which the user has not been granted choose permission. A user with access to the Wagtail admin could se...