77023 matches found
The vulnerability of the decoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the DCM decoder in the console-based image editing tool ImageMagick is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20260724-73-0019
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
CVE-2026-54120
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...
labymod-poc
Security Audit Report — Laby Launcher 3.0.11 Target: Laby Launch...
EUVD-2026-48381
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/configgen/generator.go:86,108,119 interpolates the operator-supplied ListenHost and TunDevice fields raw into a text/template that produces the agent's config.yml...
CVE-2026-47722
Nebula-mesh (self-hosted control plane for Slack Nebula) prior to v0.3.2 is affected by YAML injection in host advanced overrides. The root cause is that ListenHost and TunDevice are interpolated directly into a text/template used to generate the agent config.yml, and the web/advanced input has o...
CVE-2026-65763
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 - Improper validation of user inputs lead to a reflective XSS vulnerability...
CVE-2026-65762
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 - Improper validation of user inputs lead to a reflective XSS vulnerability...
CVE-2026-65763
CVE-2026-65763 affects Phoca Maps (Phoca.cz) Joomla extension versions 1.0.0 through 6.0.9. The vulnerability is a reflected XSS caused by improper validation of user inputs, enabling an attacker to reflect malicious input in the response. Metrics indicate a CVSS 4.0 base with a 5.1 score (medium...
CVE-2026-65763
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 - Improper validation of user inputs lead to a reflective XSS vulnerability...
GHSA-XMF8-CVQR-RFGJ Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers
Summary The exported getToken helper next-auth/jwt and @auth/core/jwt can throw an uncaught exception when it reads a malformed Authorization: Bearer … header. When no session cookie is present, getToken URL-decodes the bearer value before validating it, and malformed percent-encoding causes the...
Microsoft Surface Remote Code Execution Vulnerability
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in OptimizationGuide in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Printing in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the GPU component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs. In Google Chrome, prior to version 147.0.7727.138, untrusted inputs could be processed without proper validation. This allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page. Chromium...