Linux Distros Unpatched Vulnerability : CVE-2026-105263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file...

CVE-2026-106294: Incomplete Cleanup

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106249: Incorrect Authorization

Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106244: Incorrect Authorization

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106288: Missing Authorization

Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106333: Incorrect Authorization

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106329: Incorrect Authorization

Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106304: Out-of-bounds Read

Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106325: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

PT-2026-106893

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Passwords component that allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-106917

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in Permissions allows a remote attacker to bypass system access restrictions by sending crafted network traffic. Recommendations Update Google Chrome to version...

CVE-2026-106210: Observable Discrepancy

Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

PT-2026-107090

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Network component allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one orig...

PT-2026-107061

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the USB component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to induce the installation ...

PT-2026-106992

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in the UI allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations Update Google...

Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-12673)

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

Cisco ASA Authentication Bypass by Spoofing (CVE-2023-20256)

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

PT-2026-106324

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.31.1 Description A remote out-of-bounds read can occur within the Completions Request Handler component. The issue resides in the conv ssm forward function located in the vllm/model executor/layers/mamba/mamba mixer2.p...

CVE-2026-105621: Improper Authorization

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...

PT-2026-106719

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql query of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password resul...