14031 matches found
PT-2026-82251
The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...
EUVD-2026-66748
AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verification mechanism, allowing attackers to forge any user identity credential information, thereby causing sensitive...
Linux Distros Unpatched Vulnerability : CVE-2026-78897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive...
Linux Distros Unpatched Vulnerability : CVE-2026-78991
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive...
Linux Distros Unpatched Vulnerability : CVE-2026-79154
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive informatio...
Linux Distros Unpatched Vulnerability : CVE-2026-79126
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain...
Linux Distros Unpatched Vulnerability : CVE-2026-79076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic...
Linux Distros Unpatched Vulnerability : CVE-2026-79134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML pag...
Linux Distros Unpatched Vulnerability : CVE-2026-79287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-79249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted file. Chromium...
CVE-2025-61162
Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...
CVE-2025-61162: Improper Access Control
Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...
PT-2026-82249
Name of the Vulnerable Software and Affected Versions Reactor Netty versions 1.3.0 through 1.3.6 Reactor Netty versions 1.1.0 through 1.2.18 Reactor Netty versions 1.0.52 and earlier Description The Reactor Netty WebSocket client may leak credentials during WebSocket handshake redirects to a...
The vulnerability of the tps53679_identify_chip() function in the drivers/hwmon/pmbus/tps53679.c driver for monitoring hardware in the Linux operating system allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the tps53679identifychip function in the drivers/hwmon/pmbus/tps53679.c driver for monitoring hardware in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098772)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098772 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfsioctlspaceinfo slotcount TOCTOU which can lead to info-leak btrfsioctlspaceinfo h...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093682)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093682 advisory. Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 an...
Oracle Linux 10 : assertj-core (ELSA-2026-59372)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59372 advisory. - Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter Tenable has extracted the preceding description block directly from the Oracle Linux...
PT-2026-82247
Name of the Vulnerable Software and Affected Versions Reactor Netty versions 1.3.0 through 1.3.6 Reactor Netty versions 1.1.0 through 1.2.18 Reactor Netty versions 1.0.52 and earlier Description In specific scenarios involving multiple clients with different DNS resolver configurations, the...
CVE-2026-65092
creationtimestamp| type| source ---|---|--- 2026-08-25 23:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwweoxv3s2o 2026-09-02 13:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muk2ktl53f2q...