311730 matches found
CVE-2026-76039
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
CVE-2026-76039
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
CVE-2026-76039
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
CVE-2026-76039
Google Chrome on Android prior to 151.0.7922.169 contains an incorrect reference resolution flaw in Core, allowing a remote attacker to use social engineering and a crafted HTML page to obtain sensitive information (CVSS 6.5, confidentiality-high). CISA SSVC reports no active exploitation. Fix: u...
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: openstack-glance-2026.1, airflow-postgres-fips, openstack-glance-2025.1, openstack-glance-2025.2, openstack-placement-2026.1-fips, openstack-keystone-2026.1-fips, openstack-placement-2025.1-fips, openstack-horizon-2026.1, openstack-nova-2025.2,...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: hono, flyway, logstash-fips, seata, opensearch-fips, spark-fips, apache-activemq-artemis, reposilite, infinispan, tez, traccar-fips, kafbat-ui-fips, cruise-control, wavefront-proxy, apache-pulsar-fips, s3proxy, akhq, traccar, kafka-bridge-fips,...
CVE-2026-76032
Pydio Cells 5.0.0 through 5.0.2 returns share-link details to any authenticated user. The REST handler for GET /a/share/link/Uuid in idm/share/rest/handler.go reads the workspace UUID from the path, calls LinkById, and writes the result with no authorization step, whereas the sibling handler for...
CVE-2026-67440
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the DEVICEBROWSE, DEVICENODEATTRIBUTE, HOSTINTERFACES, and DEVICETAGSREQUEST handlers in server/runtime/index.js return device-discovery, node-attribute, host-network-interface, and device-tag metadata...
CVE-2026-52480
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...
CVE-2026-52481
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcpactions function...
EUVD-2026-61216
Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.listing, Ftps.get, and Ftps.listing API commands in lib/Froxlor/Api/Commands/Customers.php, lib/Froxlor/Api/Commands/Admins.php, and...
CVE-2026-62988 Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints
Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.listing, Ftps.get, and Ftps.listing API commands in lib/Froxlor/Api/Commands/Customers.php, lib/Froxlor/Api/Commands/Admins.php, and...
CVE-2026-62988
Froxlor versions 2.3.7 through 2.3.8 expose password hashes and Base32-encoded TOTP seeds via API endpoints (Customers, Admins, Ftps commands). An authenticated caller can crack hashes offline and generate valid 2FA codes, enabling full account takeover. Upgrade to 2.3.8 and reset 2FA secrets for...
CVE-2026-66780
creationtimestamp| type| source ---|---|--- 2026-08-18 20:09:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtezi7xmyo2c 2026-08-18 20:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf3ra5x5j2j 2026-08-20 12:59:58+00:00| seen|...
CVE-2026-67440 FUXA: Unauthenticated Socket.IO read events
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the DEVICEBROWSE, DEVICENODEATTRIBUTE, HOSTINTERFACES, and DEVICETAGSREQUEST handlers in server/runtime/index.js return device-discovery, node-attribute, host-network-interface, and device-tag metadata...
CVE-2026-67440
In FUXA versions 1.3.2 and earlier, the DEVICE_BROWSE, DEVICE_NODE_ATTRIBUTE, HOST_INTERFACES, and DEVICE_TAGS_REQUEST Socket.IO handlers in server/runtime/index.js omit isSocketAdminAuthorized checks when secureEnabled is true, allowing unauthenticated or guest users to collect device-discovery,...
CVE-2026-67440 FUXA: Unauthenticated Socket.IO read events
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the DEVICEBROWSE, DEVICENODEATTRIBUTE, HOSTINTERFACES, and DEVICETAGSREQUEST handlers in server/runtime/index.js return device-discovery, node-attribute, host-network-interface, and device-tag metadata...
CVE-2026-76032 Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Handler
Pydio Cells 5.0.0 through 5.0.2 returns share-link details to any authenticated user. The REST handler for GET /a/share/link/Uuid in idm/share/rest/handler.go reads the workspace UUID from the path, calls LinkById, and writes the result with no authorization step, whereas the sibling handler for...
CVE-2026-76032 Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Handler
Pydio Cells 5.0.0 through 5.0.2 returns share-link details to any authenticated user. The REST handler for GET /a/share/link/Uuid in idm/share/rest/handler.go reads the workspace UUID from the path, calls LinkById, and writes the result with no authorization step, whereas the sibling handler for...
EUVD-2026-61205
Pydio Cells 5.0.0 through 5.0.2 returns share-link details to any authenticated user. The REST handler for GET /a/share/link/Uuid in idm/share/rest/handler.go reads the workspace UUID from the path, calls LinkById, and writes the result with no authorization step, whereas the sibling handler for...