CVE-2026-71573

Joomla! Core - 20260802 - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests...

openvas-scanner v23.50.17

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

Untrusted Search Path

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

CVE-2026-72286

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper migration requires additional SNP-specific state such as...

CVE-2026-0289

CVE-2026-0289 is a security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser , caused by an inappropriate implementation that allows a user to bypass intended security controls. The NVD assigns a CVSS 3.1 score of 6.5 (MEDIUM) with a network attack vecto...

CVE-2026-0289 Prisma Browser: Inappropriate Implementation in Account Protection

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

CVE-2026-19168 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-19152 Inappropriate implementation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-19150 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CISA: K-12 Cybersecurity Foundations: Objectives and Practices

This one-pager provides an overview of the eight key objectives and associated practices found in the K-12 Cybersecurity Foundations: Implementation Guide. It serves as a quick reference guide for K-12 school and district leaders, IT and cybersecurity personnel, and other K-12 personnel involved ...

CISA: K-12 Cybersecurity Foundations: Getting Started Guide

The K-12 Cybersecurity Foundations: Getting Started Guide serves as a starting point for K-12 schools and districts and provides guidance on implementing fundamental cybersecurity controls, which are measures put in place to protect against and mitigate cyber threats...

CISA: K-12 Cybersecurity Foundations: Implementation Guide

The K-12 Cybersecurity Foundations: Implementation Guide is designed to help schools and districts improve their cyber posture and develop or sustain a reliable and sensible approach to cyber defense. It outlines eight objectives and actionable practices, strategies and tactics to support schools...

CVE-2026-19168

A flaw was found in V8 in Google Chrome. An inappropriate implementation allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to unauthorized code execution...

CVE-2026-19150

A flaw was found in V8, the JavaScript engine used in Google Chrome. An inappropriate implementation vulnerability allowed a remote attacker to execute arbitrary code within the browser's sandbox. This could be achieved by enticing a user to visit a specially crafted HTML page. The primary impact...

CVE-2026-68379

A flaw was found in the Linux kernel's TCP implementation. A reference leak in TIMEWAIT sockets can occur upon a PSP Policy Security Policy failure in both IPv4 and IPv6 receive paths. This vulnerability can lead to a memory leak of tcptwbucket structures, potentially resulting in a Denial of...

Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Secure Firewall Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the login.cgi endpoint. The issue results from improper...

PT-2026-69543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SLIP Serial Line IP implementation when handling MTU Maximum Transmission Unit changes. The function sl realloc bufs updates the rbuff and buffsize while...

PT-2026-69720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCTP implementation where the sctp auth ep add chunkid function uses an incorrect capacity limit for the ep-auth chunk list. While the limit is set to 20 entries,...

PT-2026-69654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Variable Refresh Rate VRR implementation where the system fails to explicitly ensure that the minimum and maximum vertical frequencies vfreq provided by the Extend...

monty v0.0.20

Monty A minimal, secure Python interpreter written in Rust for use by AI. Experimental - This project is still in development, and not ready for prime time. A minimal, secure Python interpreter written in Rust for use by AI. Monty avoids the cost, latency, complexity and general faff of using a...