579 matches found
DEBIAN-CVE-2026-7952
Insufficient policy enforcement in Extensions in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...
BELL-CVE-2026-31712
Bulletin has no description...
ECHO-DA5B-B137-E26D
Bulletin has no description...
DEBIAN-CVE-2026-7580
A vulnerability was detected in Exiftool up to 13.53. Impacted is the function Processmrld of the file lib/Image/ExifTool/GM.pm of the component JPEG/QuickTime/MOV/MP4. The manipulation of the argument -ee results in code injection. Attacking locally is a requirement. Upgrading to version 13.54 i...
MINI-MFMV-RV83-4H42
Bulletin has no description...
MINI-PVRG-P79V-R89V
Bulletin has no description...
MINI-228G-VVXX-PVC7
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-31465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - writeback: don't block sync for filesystems with no data integrity guarantees Add a SBINODATAINTEGRITY superblock flag for filesystems that cannot guarantee dat...
DEBIAN-CVE-2026-41898
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::setpskclientcallback, setpskservercallback, setcookiegeneratecb, and setstatelesscookiegeneratecb forwarded the user closure's returned usize...
EUVD-2026-25363
A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchd...
MINI-39FX-R24X-RVFF
Bulletin has no description...
MINI-RHJF-HVV3-6347
Bulletin has no description...
MINI-9M65-R92M-GVP7
Bulletin has no description...
CVE-2026-40434
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...
MCPHub has an authentication bypass
MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges...
MINI-GRMM-HWV4-FFFV
Bulletin has no description...
📄 Pachno 1.0.6 Cross Site Request Forgery
Pachno version 1.0.6 suffers from a cross site request forgery vulnerability. Pachno 1.0.6 Cross-Site Request Forgery Vendor: Daniel André Eikeland Product web page: https://github.com/pachno/pachno Affected version: 1.0.6 Summary: Pachno is an open-source collaboration platform formerly known as...
MINI-WGHF-95GX-3H5R
Bulletin has no description...