261897 matches found
CVE-2026-65898
DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared allowlist. Attackers can register a hook that conditionally allows dangerous attributes like onerror for trusted elements,...
CVE-2026-65907
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...
PYSEC-2026-3518 PraisonAI Slack app_mention bypasses configured user/channel authorization
PraisonAI Slack appmention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowedusers, allowedchannels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack appmention event handler. A Slack...
PYSEC-2026-3471 OpenStack Ironic allows Boot Script Injection
OpenStack Ironic through 35.0.x allows Boot Script Injection...
openjdk: Improve certification checking (Oracle CPU 2026-07)
A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares .foo.com and secret.foo.com literally and returns NAMESAMETYPE, so...
CVE-2024-58330
creationtimestamp| type| source ---|---|--- 2026-07-23 11:23:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrcpxuab4o2v...
CVE-2026-65535
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
EUVD-2026-48085
Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12 versions...
CVE-2026-65458 WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
No description...
Astra Linux – Vulnerability in Chromium
The incorrect security UI in Omnibox in Google Chrome prior to version 150.0.7871.47 allowed a remote attacker to perform UI spoofing through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Omnibox component of Google Chrome prior to version 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML through malicious network traffic. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...
BELL-CVE-2026-53586
Bulletin has no description...
CVE-2026-65430
Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...
RHSA-2026:43711 Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg
Bulletin has no description...
Exploit for Path Traversal in Aiohttp
CVE-20...