311660 matches found
CVE-2026-53458 Blueprint Studio API exposed internal exception details
Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in customcomponents/blueprintstudio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could conta...
CVE-2026-53458
Blueprint Studio (a Home Assistant configuration editor add-on) prior to v2.5.2 returned raw exception strings from backend API handlers in custom_components/blueprint_studio/backend/api.py to authenticated users, exposing internal filesystem paths and implementation details that could aid finger...
Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.6 Images Security Update
New images are available for Red Hat build of Keycloak 26.6.6 and Red Hat build of Keycloak 26.6.6 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...
GHSA-M5PQ-69XG-VCQ3 devpi-server may leak database contents
Impact If the replication protocol is enabled by using the primary or deprecated master role for a server instance, then the +changelog URL route can be used to read the complete database content including password hashes, and the ids and salts of tokens from devpi-tokens by using a trivially...
CVE-2026-68922
creationtimestamp| type| source ---|---|--- 2026-08-18 20:35:06+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8j49-mmcx-4mp5...
CVE-2026-76041
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-76041
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-76041
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...
EUVD-2026-61234
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-76041
An information disclosure flaw in the Skia graphics library in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to bypass the web origin policy via a crafted HTML page. Chromium rated this High severity; CVSS 3.1 base score 4.3 (MEDIUM). No public exploit code is referenced. The fi...
EUVD-2026-61228
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
CVE-2026-76039
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
CVE-2026-76039
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
CVE-2026-76039
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
CVE-2026-76039
Google Chrome on Android prior to 151.0.7922.169 contains an incorrect reference resolution flaw in Core, allowing a remote attacker to use social engineering and a crafted HTML page to obtain sensitive information (CVSS 6.5, confidentiality-high). CISA SSVC reports no active exploitation. Fix: u...
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, apache-beam-python-3.14-sdk, openstack-horizon-2025.2, openstack-horizon-2025.1-fips, openstack-glance-2026.1-fips, openstack-horizon-2025.2-fips, openstack-placement-2025.2, openstack-glance-2025.1, openstack-placement-2025.2-fips,...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: opensearch-fips, keycloak-fips, reposilite, knative-kafka-broker, elasticsearch, neo4j, s3proxy, pinot-fips, flyway-fips, apache-hop-fips, apache-pulsar, kserve-modelmesh, tez, elasticsearch-fips, kafka-bridge, kayenta-fips, apache-activemq-artemis, camunda-zeebe,...
CVE-2026-76032
Pydio Cells 5.0.0 through 5.0.2 returns share-link details to any authenticated user. The REST handler for GET /a/share/link/Uuid in idm/share/rest/handler.go reads the workspace UUID from the path, calls LinkById, and writes the result with no authorization step, whereas the sibling handler for...
CVE-2026-67440
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the DEVICEBROWSE, DEVICENODEATTRIBUTE, HOSTINTERFACES, and DEVICETAGSREQUEST handlers in server/runtime/index.js return device-discovery, node-attribute, host-network-interface, and device-tag metadata...