128639 matches found
GNUnet P2P Framework 0.26.2
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...
CVE-2026-16422
CVE-2026-16422 concerns Google Chrome on Linux. It reports insufficient validation of untrusted input in the Certificate handling, prior to version 150.0.7871.182, allowing a privileged network-position attacker to perform domain spoofing through malicious network traffic. The Connected CVE entry...
CVE-2026-16416
CVE-2026-16416 describes an integer overflow in Chromecast within Google Chrome, affecting builds prior to 150.0.7871.182. The issue could allow a local attacker to potentially perform a sandbox escape through malicious network traffic (Chromium severity: High). Connected documents corroborate th...
CVE-2026-16414
CVE-2026-16414 describes insufficient validation of untrusted input in Chromecast within Google Chrome, affecting the Chromium-based Chromecast component before version 150.0.7871.182. The underlying issue enables a local attacker to potentially perform a sandbox escape through malicious network ...
CVE-2026-64018
A flaw was found in the Linux kernel's mana network driver. In Confidential Virtual Machines VMs, a missing bounds check when processing network events can allow a malicious hardware component or a compromised VM to write data outside of an intended memory region. This out-of-bounds access could...
CVE-2026-63917
A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...
EUVD-2026-44342
Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability...
CVE-2026-63972
A flaw was found in the Linux kernel's mana network driver. An issue arises when the driver attempts a redundant detach operation on an already-detached network port. This can cause a null pointer dereference, leading to a system crash and a Denial of Service DoS...
EUVD-2026-44354
Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability...
EUVD-2026-44395
Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability...
libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...
CVE-2026-65049 Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX Action
Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide deletion of all Ninja Forms data by exploiting a site-scoped capability check combined with unsafe multisite migration...
CVE-2026-65049
The CVE-2026-65049 issue affects Ninja Forms plugin for WordPress Multisite (version 3.14.8 and earlier). An incorrect authorization allows a subsite Administrator to trigger network-wide deletion of Ninja Forms data via admin-ajax.php with the nf_delete_all_data action, using a per-site nonce to...
CVE-2026-65049 Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX Action
Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide deletion of all Ninja Forms data by exploiting a site-scoped capability check combined with unsafe multisite migration...
EUVD-2026-46269
Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide deletion of all Ninja Forms data by exploiting a site-scoped capability check combined with unsafe multisite migration...
EUVD-2026-46253
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
CVE-2026-16389
Incorrect boundary conditions, integer overflow in the Libraries compo...
CVE-2026-16389
CVE-2026-16389 affects the NSS Libraries component, caused by incorrect boundary conditions leading to an integer overflow. The vulnerability is documented across multiple sources and has been addressed by Mozilla in Firefox 153. Affected scope is the NSS Libraries code; the exact impacted produc...
CVE-2026-64620
A heap-based buffer overflow in FreeRDP's cryptorsacommon allows an unauthenticated remote attacker to trigger a denial of service or potential remote code execution. By sending a crafted ciphertext during RDP Standard Security key establishment, the attacker can force a data write before the siz...
BIT-DOTNET-SDK-2026-57108 .NET Denial of Service Vulnerability
Access of resource using incompatible type 'type confusion' in .NET Core allows an unauthorized attacker to deny service over a network...