324 matches found
CVE-2026-79023
Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78975
Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79038
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78991
Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79044
Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
Security Bulletin: Vulnerability in Apache Tomcat affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in Apache Tomcat has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
PT-2026-81713
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Forms allows a remote attacker to obtain sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome to version...
CVE-2026-59657 Apache CloudStack: Sensitive Information Disclosure via Cleartext Storage in AsyncJob
Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database. This issue affects Apache CloudStack: from 4.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, whi...
CVE-2026-61397 Apache CloudStack: OAuth2 Token Cross-Request Leak
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to...
PT-2026-79179
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A kernel heap over-read allows a remote attacker to obtain sensitive information and cause a denial of service. A kernel heap over-read occurs when the system reads more dat...
PT-2026-78659
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...
CVE-2026-72156
A flaw was found in the Linux kernel's microchip-spi Field-Programmable Gate Array FPGA module. This vulnerability occurs in the mpfopsparseheader function when processing a bitstream. If a crafted bitstream sets the headersize to zero, the function attempts to read data from memory before the...
EUVD-2026-58368
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...
CVE-2026-72670 Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials
A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key...
CVE-2026-16929
IBM i is affected by CVE-2026-16929 among multiple host-server vulnerabilities. Affected products and versions: IBM i 7.3–7.6. Description indicates a buffer overflow that could allow a remote authenticated attacker to obtain sensitive information. The IBM security bulletin lists related CVEs and...
CVE-2026-58432
The Gitea application (code.gitea.io/gitea) is vulnerable to Missing Authorization and Authorization Bypass issues. These flaws can be triggered through a user-controlled key or incorrect permission assignments for critical resources, potentially leading to the exposure of sensitive information t...
CVE-2026-59507
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...
CVE-2026-59507 Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...
Vulnerability of the kerberos_DecryptMessage() function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file of the RDP client FreeRDP, which allows a intruder to disclose sensitive information and cause a denial-of-service attack.
The vulnerability of the kerberosDecryptMessage function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information and cause denial-of-service attacks...