45272 matches found
CVE-2026-91724
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91724
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91724
A use after free vulnerability in the Input component of Google Chrome (prior to version 153.0.8010.47) allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability also impacts Microsoft Edge (Chromium...
CVE-2026-83200
Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromi...
EUVD-2026-79765
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Workbenches. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardwa...
CVE-2026-83477
Oracle E-Business Suite (component: Work in Process – Workbenches ) is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with access to the adjacent network segment can compromise the product with low complexity and no user ...
CVE-2026-83200
CVE-2026-83200 affects the Oracle Process Manufacturing Intelligence product within Oracle E-Business Suite, specifically the Internal Operations component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via Oracle Net can exploit this vulnerability w...
EUVD-2026-79552
Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromi...
Duplicate Advisory: Vikunja: Unbounded nested task-filter recursion permits API process termination
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xxc3-xpmc-vmvr. This link is maintained to preserve external references. Original Description vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the task-filter endpoint that accepts...
GHSA-JFW3-2GCF-23R5 Duplicate Advisory: Vikunja: Unbounded nested task-filter recursion permits API process termination
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xxc3-xpmc-vmvr. This link is maintained to preserve external references. Original Description vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the task-filter endpoint that accepts...
GHSA-55P4-8J34-JV53 Duplicate Advisory: Vikunja: Unbounded CSV row cardinality permits API process termination
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pqf9-h8g4-8gmh. This link is maintained to preserve external references. Original Description vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the POST /api/v2/migration/csv/migrate...
Malicious code in process-tailwind (npm)
Source: amazon-inspector d22d8ef47e17a005ea3305f7d97a3cb4de14f0a3a07e8a1e461e13d25e5e7432 On require/import, index.js unconditionally calls initialize, which spawns a detached, unref'd node loader.js child with stdio ignored and writes a PID file. loader.js fetches JSON from...
Malicious code in process-lhpm (npm)
Source: amazon-inspector a663308c4051eb4b31faf7fb984989f3e1b3498e505dc05052e2beb5fbf7e6d2 On require/import, index.js auto-invokes initialize, which spawns a detached, stdio-suppressed node loader.js background process. loader.js performs an HTTPS GET to https://api.npoint.io/33e8d008c334b060adad...
Malicious Package
Overview process-tailwind is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview process-lhpm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview @biz44/process-runtime-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
DEBIAN-CVE-2026-91959
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious BINDACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...
CVE-2026-91959
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious BINDACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...
CVE-2026-44163
fluent-plugin-opentelemetry is a Fluentd input and output plugin for forwarding OpenTelemetry Protocol data. Prior to 0.5.3, the inopentelemetry HTTP input read the entire incoming request body and decompressed payloads into memory without enforcing maximum size thresholds. When an OpenTelemetry...
