CVE-2026-65709 sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API

sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in the JSON-RPC API that allows API token holders to enumerate account metadata, overwrite passwords, and delete accounts across the entire vault without per-account access control. Attackers can invoke...

Juniper Networks Junos OS 授权问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has an authorization issue vulnerability that stems from multiple vulnerabilities ...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46756)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof a secure user interface with the help of specially crafted HTML pages...

The vulnerability in the Google Chrome browser’s user interface allows a hacker to conceal the secure user interface.

The vulnerability of the user interface in full-screen mode of the Google Chrome browser is related to deficiencies in data storage. Exploiting this vulnerability allows a malicious actor to conceal the secure user interface by using a specially crafted HTML page...