Subresource Data Compromise Component Compromise

The vulnerability of the Subresource Integrity component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

DevTools Component Data Compromise

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

Input component in Google DoS

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of the UI components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Dawn Component Confidential Data Access

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-19953: Improper Validation of Unsafe Equivalence in Input

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...

DIAFAN.CMS Unauthenticated Access

The vulnerability of the DIAFAN.CMS website content management system is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

WebUI Confidential Data Access

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

Extensions Component Confidential Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and affect the integrity of that data...

Amazon Linux 2 : iperf3, --advisory ALAS2-2026-3869 (ALAS-2026-3869)

The version of iperf3 installed on the remote host is prior to 3.1.7-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3869 advisory. A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized...

Amazon Linux 2023 : iperf3, iperf3-devel (ALAS2023-2026-2070)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2070 advisory. A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as parallel and len, which are not properly...

PT-2026-83841

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in MegaMenu Layout Container & Embed Inputs in Helix Ultimate 2.2.10 - Unsanitized column and item configuration values stored within the MegaMenu layout JSON were rendered without complete contextual escaping, allowing injection...

WordPress WPForms Pro plugin has a cross-site scripting vulnerability

The WordPress WPForms Pro plugin is one of the most popular paid versions of form plugins on WordPress. The WPForms Pro plugin has a cross-site scripting vulnerability, which stems from insufficient input cleaning and output escaping for values of the Single Line Text and Paragraph Text Fields. N...

WordPress Stripe Payments plugin cross-site scripting vulnerability

The WordPress Stripe Payments plugin is a plugin that allows WordPress websites to connect to the Stripe payment gateway for online payments. The WordPress Stripe Payments plugin has a cross-site scripting vulnerability, which stems from the application’s lack of effective filtering and escaping ...

CVE-2026-82858: Insufficient Verification of Data Authenticity

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as trusted. Attackers can supply malicious execute plans that bypass security checks to perform unsafe reconciliation...

amdgpu_userq_signal_ioctl Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqsignalioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to improper input data validation. Exploiting this vulnerability could...

PT-2026-83685

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash admin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash the entire node. Two LiveView event handlers interned atoms from unvalidated client input: AshAdmin.PageLive's set...

Important: iperf3

Issue Overview: A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive...

Printing Component Confidential Data Access

The vulnerability of the Printing component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

Chromoting Remote Administration DoS

The vulnerability of the Chromoting remote administration tool, which is used by browsers such as Google Chrome and Microsoft Edge, is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially...