12938 matches found
CVE-2026-95210: Improper Certificate Validation
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
PT-2026-108184
The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...
PT-2026-108186
The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...
PT-2026-108165
The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...
PT-2026-108166
The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document tha...
PT-2026-108164
The Affinity by Canva application before 3.3.1 October 2026 release did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in...
CVE-2026-95210
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
CVE-2026-95210
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
WordPress Super Forms plugin <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability
Authenticated Subscriber+ Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...
PT-2026-107751
This module enables you to link the output of a field to a URL or to the value of another field. The module doesn't sufficiently separate field content from template code when rendering linked field output. Depending on the Twig extensions installed on the site, this can be used to expose site...
PT-2026-107533
Name of the Vulnerable Software and Affected Versions @backstage/plugin-techdocs-node versions prior to 1.14.8 @backstage/plugin-techdocs-node versions prior to 1.15.6 @backstage/plugin-techdocs-node versions prior to 2.0.1 Description The @backstage/plugin-techdocs-node package improperly...
Linux Distros Unpatched Vulnerability : CVE-2026-106253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome...
PT-2026-107531
Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.14.6 Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package allows remote code execution through crafted markdown extensions within the mkdocs.yml file. An authenticated user wi...
Linux Distros Unpatched Vulnerability : CVE-2026-106354
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-106331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin...
Linux Distros Unpatched Vulnerability : CVE-2026-106416
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-106402
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a...
PT-2026-108130
Name of the Vulnerable Software and Affected Versions GnuTLS version 3.8.13 Description Improper certificate validation occurs within the check for unknown exts function of the cryptographic library. This issue causes the application to accept certificates containing invalid extensions, which may...
