260898 matches found
PT-2026-63555
Name of the Vulnerable Software and Affected Versions Dompdf versions 3.x and earlier Description An issue exists where a malicious actor providing unrestricted content for rendering can leak filesystem information. By using an element within a data-URI encoded SVG document, an attacker can attem...
PT-2026-63512
Name of the Vulnerable Software and Affected Versions syncfusion ej2-javascript-ui-controls versions prior to 33.2.4 Description An OS command injection flaw exists when the software is accessed locally. The issue resides in the child process.exec function within the package.json file, where...
Photon OS 5.0: Grub2 PHSA-2026-5.0-0857
An update of the grub2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0857. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-63548
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description The HTTP/2-to-HTTP/1.x translation layer, specifically within Http2StreamFrameToHttpObjectCodec and InboundHttp2ToHttpAdapter, fails to deduplicate or...
ROS-20260722-73-0005
The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2026-63495
Name of the Vulnerable Software and Affected Versions OIDC::Lite versions through 0.12.1 Description An issue exists where ID Token signature verification can be bypassed due to a token-controlled algorithm allowlist in the verify function. When a caller does not specify a pinned algorithm, the...
RHEL 8 : pki-deps:10.6 (RHSA-2026:43218)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43218 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: jackson-databind:...
PT-2026-63494
Name of the Vulnerable Software and Affected Versions IZArc version 4.6 Description An issue in the unrar.dll component allows attackers to perform path traversal, a technique used to access files and directories that are stored outside the intended folder. Recommendations At the moment, there is...
EUVD-2025-210503
An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...
ROS-20260722-73-0008
The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2026-60292
creationtimestamp| type| source ---|---|--- 2026-07-21 23:48:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ynsyrfe2v 2026-07-23 16:50:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 17:07:07+00:00| seen|...
CVE-2026-60290
creationtimestamp| type| source ---|---|--- 2026-07-21 23:46:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ykb4y3r2k 2026-07-23 16:50:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 08:07:07+00:00| seen|...
CVE-2026-60246
creationtimestamp| type| source ---|---|--- 2026-07-21 23:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6x3qju4e2r 2026-07-23 16:49:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 22:07:07+00:00| seen|...
DEBIAN-CVE-2026-56820
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...
CVE-2026-56817
Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, any caller that can deliver bytes to a Netty channel pipeline containing XmlDecoder can send XML with a DOCTYPE declaration...
DEBIAN-CVE-2026-16422
Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged network position to perform domain spoofing via malicious network traffic. Chromium security severity: High...
CVE-2026-60210
creationtimestamp| type| source ---|---|--- 2026-07-21 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wjrzxac2z 2026-07-23 16:48:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 06:37:07+00:00| seen|...
CVE-2026-44454
creationtimestamp| type| source ---|---|--- 2026-07-21 22:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr6uou2swp2m...