The vulnerability of the CSS components in Google Chrome and Microsoft Edge web browsers allows attackers to compromise data integrity.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially crafted HTML page...

PT-2026-84757

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 12.4.10-1.1 Description An authenticated user with permissions to query a SQL data source can cause a denial of service by injecting the timeGroup macro through a WHERE clause. Because the regex-based macro parsing do...

CVE-2024-35585

Oxford Nanopore MinKNOW , a sequencing software used in nanopore-based genomic analysis, is vulnerable to weak authentication in versions before 24.06 . The application relies on a client's source IP address as its authentication mechanism, meaning an attacker who can spoof or originate traffic f...

The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data.

The vulnerability of the Password component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

The vulnerability of the DeviceBoundSessionCredentials component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to gain access to confidential data.

The vulnerability of the DeviceBoundSessionCredentials component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML...

The vulnerability of the Network component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

The vulnerability of the SVG component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the SVG component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

The vulnerability of the CSS components in Google Chrome and Microsoft Edge web browsers allows attackers to compromise data integrity.

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially crafted HTML page...

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise data integrity.

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially created HTML page...

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to compromise data integrity through a specially crafted HTML page...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to access confidential data.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the FedCM component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the FedCM component in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-84482

creationtimestamp| type| source ---|---|--- 2026-09-01 23:02:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dkpruwnoj7oab...

CVE-2026-84208

creationtimestamp| type| source ---|---|--- 2026-09-01 22:42:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bhpcnouscr4ff 2026-09-02 04:12:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muj2yoou662x...

APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)

Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...

CVE-2026-73749

creationtimestamp| type| source ---|---|--- 2026-09-01 22:07:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muigmtjksk2w 2026-09-02 13:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muk26cfgl72y 2026-09-03 01:58:25+00:00| seen|...

CVE-2026-19766

creationtimestamp| type| source ---|---|--- 2026-09-01 22:07:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muiglyplmh25 2026-09-01 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muik4glrds2y 2026-09-05 03:07:07+00:00| seen|...

super clearfog-v1.2.6

📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...