ROS-20260720-73-0008

The vulnerability of the ANGLE library in the Google Chrome browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially...

ROS-20260720-73-0061

The vulnerability of the Dawn component in the Google Chrome browser arises due to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

CVE-2026-63751: Incorrect Authorization

SurrealDB versions before 3.1.0 contain a field-level permission bypass vulnerability in JSON Patch operations that allows authenticated users to read protected fields. Attackers can use UPDATE PATCH with an empty from pointer in copy or move operations to duplicate all record fields, including...

ROS-20260720-73-0006

The vulnerability of the GPU Video component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a...

PT-2026-61567

SurrealDB versions before 3.1.0 contain a field-level permission bypass vulnerability in JSON Patch operations that allows authenticated users to read protected fields. Attackers can use UPDATE PATCH with an empty from pointer in copy or move operations to duplicate all record fields, including...

PT-2026-61811

Name of the Vulnerable Software and Affected Versions filebrowser versions prior to v2.63.16 Description When creating a password-protected share or listing existing shares, the application includes the full bcrypt password hash and the secret token in the JSON response. This occurs because the...

PT-2026-61671

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens...

Vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages, as well as Microsoft Office Online Server, allow attackers to disclose protected information.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs, as well as Microsoft Office Online Server, is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by...

The vulnerability of the IOCTL dispatcher in the ASUS System Control Interface (ASCI) driver and the set of tools for managing and protecting corporate devices provided by ASUS Business Manager, which allows a malicious actor to disclose protected information or cause service failures.

The vulnerability of the IOCTL handler of the ASCI driver allows an attacker to exploit it to disclose protected information or cause service failures. This vulnerability is related to errors that occur during the update of the link counters. Exploiting this vulnerability could enable a remote...

The vulnerability of the Push Notification component in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the Push Notification component in the Windows operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Windows QoS Packet Scheduler allows a hacker to exploit it to disclose protected information.

The vulnerability of the Windows QoS Packet Scheduler in the operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the SMB server for Windows operating systems allows attackers to expose protected information.

The vulnerability of the SMB server for Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Vulnerability of the Cryptographic Operating System Services in Windows, allowing attackers to disclose protected information

The vulnerability of the Windows Cryptographic Operating System services is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Microsoft Office software package, related to the use of an uninitialized resource, allows a hacker to disclose protected information.

The vulnerability of the Microsoft Office suite is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Remote Desktop Protocol (RDP) on Windows operating systems allows attackers to compromise protected information.

The vulnerability of the Remote Desktop Protocol RDP on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

VulnCheck KEV: CVE-2016-4800

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

CVE-2026-16213

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

CVE-2026-63858: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: add hook transactions for device deletions Restore the flag that indicates that the hook is going away, ie. NFTHOOKREMOVE, but add a new transaction object to track deletion of hooks without altering the...