1258 matches found
Incorrect Authorization
Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
DEBIAN-CVE-2026-106259
Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106326
Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...
CVE-2026-106326
Google Chrome on Android prior to version 155.0.8059.39 is vulnerable to a confused deputy flaw in its UI. A local attacker can leverage a malicious co-installed application to trick the browser into misusing its higher authority, allowing the attacker to bypass system access restrictions and gai...
Visual Studio Code Source Editor XSS
The vulnerability of Visual Studio Code’s source editor is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in the Presentation component of Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions through a crafted HTML page. Chromium security severity: Medium...
ROS-20261002-73-0155
The vulnerability in rclone is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending specially crafted HTTP requests...
Rocky Linux 8 [CIQ] Security Update: libcmis / libcmis-debuginfo / libcmis-debugsource Multiple Vulnerabilities (crlsa-2020_4628)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204628 advisory. libreoffice: 'stealth mode' remote resource restrictions bypass CVE-2020-12802 libreoffice: forms allowed to be submitted to any URI could result in local...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
PT-2026-102393
Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.38.4 Description Authenticated users with Events view permission can bypass per-monitor access restrictions via the 'FramesController index' endpoint. This allows them to list frame records from monitors they are...
Netty IpSubnetFilterRule Comparator Bypass
The vulnerability of the IpSubnetFilterRule.compareTo function in the framework for developing network applications, servers, and Netty protocol clients is related to improper checking of the specified data type for input data. Exploiting this vulnerability can allow an attacker to bypass securit...
CVE-2026-47861
A flaw was found in Spring Integration. An unauthenticated remote attacker can exploit this by sending a specially crafted UDP packet to a Spring Integration UDP inbound adapter. This allows the attacker to cause the server to emit an outbound UDP datagram to any internal or external host and por...
CVE-2026-93600
A flaw was found in rustls-webpki where the library incorrectly ignores X.509 name constraints that apply to Uniform Resource Identifier URI names. This issue causes these constraints to be accepted rather than properly enforced. Exploitation requires a misissued certificate and successful...
USN-8804-1 openssh vulnerabilities
Florian Kohnhäuser discovered that OpenSSH incorrectly handled shell metacharacters in certain usernames. An attacker could possibly use this issue to execute arbitrary commands when certain non-default configurations were used, resulting in arbitrary code execution. This issue only affected Ubun...
USN-8804-1: OpenSSH vulnerabilities
Florian Kohnhäuser discovered that OpenSSH incorrectly handled shell metacharacters in certain usernames. An attacker could possibly use this issue to execute arbitrary commands when certain non-default configurations were used, resulting in arbitrary code execution. This issue only affected Ubun...
PT-2026-95681
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A cross-site request forgery CSRF issue allows a remote attacker to bypass security restrictions. CSRF is a type of attack that tricks a victim into submitting a malicious request. It occur...
PT-2026-95679
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2026-19273: Improper Authentication
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper...