161726 matches found
CVE-2026-92357: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument currentsegment leads to information disclosure. The attack may be initiated remotely. The identifier o...
Linux Distros Unpatched Vulnerability : CVE-2026-90815
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup3x3 of the file...
MediaWiki apiUserrights.php Unauthorized Access
The vulnerability of the MediaWiki hypertext environment implementation, including the apiUserrights.php tool, is related to insufficient protection of operational data. Exploitation of this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
MediaWiki XSS
The vulnerability in the “resources/src/mediawiki.Api/index.js” script of the MediaWiki software, which is used for implementing the hypertext environment, is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor, operating...
Linux kernel br_multicast_leave_group Heap Buffer Overflow DoS
The vulnerability of the brmulticastleavegroup function in the net/bridge/brmulticast.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
Linux IPv6 fib6_rule_suppress() Heap Buffer Overflow
The vulnerability of the fib6rulesuppress function in the net/ipv6/fib6rules.c module of the Linux operating system’s IPv6 kernel implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentialit...
D-Link DGS-3420 XSS
The vulnerability of the System Information Settings Page component in D-Link DGS-3420 microprogramming devices is related to the lack of protective measures taken for the structure of the web page when processing the System Name parameter. Exploiting this vulnerability allows a malicious actor t...
RouterOS SSH Server Data Compromise
The vulnerability of the SSH server on the RouterOS operating system of MikroTik is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
(0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability
This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the libarchive component...
SUSE CVE-2026-90852
A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...
SUSE CVE-2026-90878
A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...
CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...
CVE-2026-91740
A flaw was found in Skia, a 2D graphics library used in Google Chrome. This vulnerability, stemming from an uninitialized resource, allows a remote attacker to obtain sensitive cross-origin data. By crafting a malicious HTML page, an attacker can trick a user into visiting it, leading to the...
CVE-2026-92114
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/webcore/src/v09/basiccatalog/functions/saferegex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be...
CVE-2026-91741
A type confusion flaw was found in the CacheStorage component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=546413288...
CVE-2026-91711
An out of bounds write flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=558342353...
CVE-2026-92114
a2ui-project a2ui versions up to 0.10.6 are affected by a Regular Expression Denial of Service (ReDoS) vulnerability in the Basic Catalog component, specifically in the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts. The root cause is inefficient regular expression complex...
CVE-2026-92114 a2ui-project a2ui Basic Catalog safe_regex.ts redos
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/webcore/src/v09/basiccatalog/functions/saferegex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be...
CVE-2026-92114 a2ui-project a2ui Basic Catalog safe_regex.ts redos
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/webcore/src/v09/basiccatalog/functions/saferegex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be...