11674 matches found
EUVD-2025-210787
Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...
EUVD-2026-66748
AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verification mechanism, allowing attackers to forge any user identity credential information, thereby causing sensitive...
Linux Distros Unpatched Vulnerability : CVE-2026-78897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive...
Linux Distros Unpatched Vulnerability : CVE-2026-79287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-79076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic...
CVE-2025-61162
Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/internal/v1/users/USERID endpoint...
Linux Distros Unpatched Vulnerability : CVE-2026-79249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted file. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-79126
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093682)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093682 advisory. Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 an...
Linux Distros Unpatched Vulnerability : CVE-2026-79154
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive informatio...
PT-2026-82144
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Ceph component where the handle reply function stores a ceph mds request pointer in the current-journal info variable while populating the inode and dentry cache...
CVE-2025-61162
Cohere North AI v1.1.5 is affected by an incorrect access control flaw in the /api/internal/v1/users/{{USER_ID}} endpoint, which allows an unauthenticated, remote attacker to arbitrarily overwrite user information via a crafted request. The CVSS 3.1 score is 7.5 (HIGH) , reflecting a network atta...
Linux Distros Unpatched Vulnerability : CVE-2026-79134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML pag...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098772)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098772 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfsioctlspaceinfo slotcount TOCTOU which can lead to info-leak btrfsioctlspaceinfo h...
PT-2026-82167
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the first Indirect Data Address Word IDAW in a list is read separately to calculate the buffer size for the full Indirect Data Addres...
CVE-2026-65092
creationtimestamp| type| source ---|---|--- 2026-08-25 23:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwweoxv3s2o 2026-09-02 13:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muk2ktl53f2q...
CVE-2026-65093
creationtimestamp| type| source ---|---|--- 2026-08-25 22:08:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwtftutde2f 2026-08-25 23:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwwevsqw426 2026-08-26 10:39:45+00:00| seen|...
CVE-2026-79176
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
DEBIAN-CVE-2026-79133
Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...