ROS-20260626-73-0019

The vulnerability of the Swarm Mode mode of the dockerd daemon, a software tool for creating containerized systems like Moby and the Mirantis Container Runtime environment, is related to the use of an unprotected alternative channel. Exploiting this vulnerability allows an attacker to compromise...

Dell Elastic Cloud Storage ObjectScale Disclosure Sensitive Information

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these systems...

Oracle Financial Services Analytical Applications Infrastructure Unauthorized Access

The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP request...

Oracle E-Business Suite Knowledge Integration Sub-component Unauthenticated Access

The vulnerability of the Knowledge Integration sub-component of the Oracle HCM Common Architecture component in the Oracle E-Business Suite relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

Oracle WebCenter Content Data Compromise

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to access control errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Shell Oracle MySQL Shell Unauthorized Access

The vulnerability of the Shell component in VS Code’s command-line and code editor client for Oracle MySQL Shell is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20260624-73-0045

The vulnerability in python-aiohttp is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

PT-2026-54578

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

Google Chrome iOS Unauthenticated Access

The vulnerability of Google Chrome browser on iOS operating systems is related to a lack of mechanisms for verifying the source of the request. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

IBM Storage Protect Server SQL Injection Unauthorized Access

The vulnerability of the IBM Storage Protect Server formerly Tivoli Storage Manager software platform lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20260623-73-0033

The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the error-prone data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

ROS-20260623-73-0050

The vulnerability in Wireshark is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2026-41047

Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise read protected information...

CVE-2026-41047 Information leak via “diff” methods in qSnapper

Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise read protected information...

ROS-20260622-73-0044

The vulnerability of the ngxmailsmtpmodule module in NGINX Plus and NGINX Open Source servers is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

PT-2026-51334

Name of the Vulnerable Software and Affected Versions qSnapper versions prior to 1.3.3 Description Lack of authentication when using the snapshot diff functions allows a local attacker to access information that is otherwise read protected. Recommendations Update to version 1.3.3 or later...

ROS-20260622-73-0014

The vulnerability of the Audio/Video components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Authentication Bypass

github.com/googleapis/mcp-toolbox is vulnerable to Authentication Bypass. The vulnerability is due to improper validation of OAuth 2.0 token introspection responses, where the mandatory active field is not verified if omitted, which allows an attacker to bypass authentication by supplying an opaq...

Cocoa widget Data Compromise

The vulnerability of the Cocoa widget in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

CVE-2026-11717

An authentication bypass vulnerability exists in the generic opaque token validation path validateOpaqueToken of googleapis/mcp-toolbox. When verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint RFC 7662, the toolbox decodes the response into an introspectResp struct where t...