Pterodactyl Panel - Remote Code Execution

Pterodactyl is a free, open-source game server management panel. Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. id: CVE-2025-49132 info: name: Pterodactyl Panel - Remote Code Execution...

DataTransfer Component Protected Information Access

The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to reading data beyond the permitted buffer boundaries. Exploitation of this vulnerability may allow an attacker to gain access to protected information...

ORB Component Protected Information Access

The vulnerability in the ORB component of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

CVE-2026-85313

A flaw was found in Apache Camel's Jetty component. When Cross-Origin Resource Sharing CORS—a mechanism that controls how web applications access resources from other domains—is enabled on an endpoint, the component applies an insecure default policy that permits requests from any domain with...

EUVD-2026-116822

CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-controlled data, such as event names or templates within the Tenders module, are not properly validated or sanitised before being included in C...

ANGLE Library Protected Information Access

The vulnerability in the ANGLE library for Google Chrome and Microsoft Edge involves the use of an uninitialized resource. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

CVE-2026-118766

Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting an OCSP request to the URI in a certificate's Authority Information Access extension. A malicious OCSP responder or an on-path attacker could redirect the client to make o...

EUVD-2026-113275

Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting an OCSP request to the URI in a certificate's Authority Information Access extension. A malicious OCSP responder or an on-path attacker could redirect the client to make o...

CVE-2026-118766: randombit botan: Botan is a C++ cryptography library

Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting an OCSP request to the URI in a certificate's Authority Information Access extension. A malicious OCSP responder or an on-path attacker could redirect the client to make o...

Jack Lloyd Botan server-side request forgery vulnerability

Versions prior to Jack Lloyd Botan 3.13.0 contain a server-side request forgery vulnerability. This vulnerability arises because their online OCSP client allows a single HTTP redirect when sending OCSP requests to URIs within the Certificate Authority Information Access extension. Malicious OCSP...

Skia graphics library Protected Information Access

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

Skia graphics library Protected Information Access

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to insufficient validation of unusual or exceptional states. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Skia graphics library Protected Information Access

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to the use of an uninitialized resource. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Skia graphics library Protected Information Access

The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Codecs Component Protected Information Access

The vulnerability in the Codecs component of Google Chrome and Microsoft Edge web browsers is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Prefetch Component Protected Information Access

The Prefetch component vulnerability in Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Codecs Component Protected Information Access

The vulnerability in the Codecs component of Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Blink Component Protected Information Access

The Blink component vulnerability in Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

MediaRecording Component Protected Information Access

The vulnerability in the MediaRecording component of Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a...

Favicon Component Protected Information Access

The Favicon component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially crafte...