59761 matches found
ROS-20260909-73-0065
The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-87460
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag...
ROS-20260909-73-0030
The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-88937
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...
CVE-2026-87490: Exposure of Sensitive Information to an Unauthorized Actor
Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87999: Server-Side Request Forgery (SSRF)
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/openwebui/retrieval/web/utils.py treated Python's globally routable address classification as proof th...
redis:6 security update
6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373...
CVE-2026-85978: Improper Control of Generation of Code
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...
The vulnerability of the Microsoft Power Platform tools, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.
The vulnerability of the Microsoft Power Platform tools is related to insufficient testing of queries on the server side. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of the uniwill_init() function in the drivers/platform/x86/uniwill/uniwill-acpi.c driver for X86 processors in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the uniwillinit function in the drivers/platform/x86/uniwill/uniwill-acp.c driver for X86 devices in the Linux operating system is related to improper energy consumption restrictions. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-19
CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...
CVE-2026-85505 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85505 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-74835 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-74835 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-59696 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-59696 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-75593 affecting package moby-engine for versions less than 25.0.3-20
CVE-2026-75593 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...
CVE-2026-17106 affecting package moby-engine for versions less than 25.0.3-20
CVE-2026-17106 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...
firefox: thunderbird: Site isolation issue in the WebExtensions component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the WebExtensions component...
