18569 matches found
EUVD-2026-37583
Incorrect Authorization vulnerability of /v2 experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue...
EUVD-2026-37535
Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-53873
The CVE-2026-53873 vulnerability affects picklescan prior to 1.0.4, where an incomplete blocklist for the profile module fails to block module-level profile.run(), enabling arbitrary code execution via exec() through crafted pickle files. Attackers can craft malicious pickles calling profile.run(...
CVE-2026-12528
A flaw was found in 389 Directory Server in the aclpnormalizeacltxt function of aclparse.c. A malformed ACI Access Control Instruction string can trigger heap-buffer-overflow writes and reads during ACI parsing. The function fails to validate that the ACI keyword has sufficient length after...
WordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by HaiND in WordPress Plugin Motors versions = 1.4.109...
USN-8390-2 linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerability
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...
postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication
A flaw was found in PostgreSQL. This SQL injection vulnerability exists within the logical replication feature, specifically when using the ALTER SUBSCRIPTION ... REFRESH PUBLICATION command. A malicious subscriber table creator can exploit this flaw to execute arbitrary SQL commands with the...
CVE-2026-40751 WordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...
CVE-2026-46978
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-46974
Technical details about CVE-2026-46974 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE feeds to obtain affected products, impact, and remediation.
CVE-2026-46960
...
CVE-2026-46955
...
CVE-2026-46945
...
CVE-2026-46929
...
CVE-2026-46922
Technical details about CVE-2026-46922 are not publicly provided in the supplied documents. No affected products, components, or remediation are specified. Monitor for updates.
CVE-2026-46908
Technical details about CVE-2026-46908 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2026-46898
...
CVE-2026-46881
Technical details for CVE-2026-46881 are not publicly available in the provided documents; monitor for updates.